0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:48:32 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x200000}]) 00:48:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:48:32 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair(0x11, 0xa, 0x100, &(0x7f0000000140)) 00:48:32 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1000000}]) 00:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x2800000000000000) 00:48:32 executing program 0: r0 = syz_io_uring_setup(0x80e, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 00:48:33 executing program 4: r0 = syz_io_uring_setup(0x66a7, &(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 00:48:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c46"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:33 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f00000001c0)={[{0x19, 0x4e00, "c998b716734f8f7ed2c12b6cf40c382bdf1b5802f60408d1ad"}, {0x1, 0x4e00, 'f'}, {0x15, 0x4e00, "e21e70a14ed1acf2dea3de37fc33e880703793972a"}]}) 00:48:33 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x2000000}]) 00:48:33 executing program 4: syz_io_uring_setup(0x189b, &(0x7f00000000c0), &(0x7f0000000140), 0x0) 00:48:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x100, 0x104, 0x20}, 0x18) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x20}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:48:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x3992070000000000) [ 3364.860306][ T5590] usb 1-1: new high-speed USB device number 19 using dummy_hcd 00:48:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:48:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c46"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:34 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x2040000}]) 00:48:34 executing program 4: r0 = syz_io_uring_setup(0x66a7, &(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000540)) io_uring_enter(r0, 0x0, 0xa8fa, 0x3, &(0x7f0000000040), 0x8) [ 3365.448760][ T5590] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3365.458557][ T5590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3365.467105][ T5590] usb 1-1: Product: syz [ 3365.471652][ T5590] usb 1-1: Manufacturer: syz [ 3365.476502][ T5590] usb 1-1: SerialNumber: syz [ 3365.629661][ T5590] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 00:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x3f00000000000000) 00:48:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x100, 0x104, 0x20}, 0x18) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x20}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (rerun: 32) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:48:34 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x3000000}]) [ 3366.291221][T13061] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3366.758717][T29108] usb 1-1: USB disconnect, device number 19 00:48:36 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 00:48:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c46"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:48:36 executing program 4: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 00:48:36 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x3e7ffff}]) 00:48:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x100, 0x104, 0x20}, 0x18) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x20}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:48:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x3f7e060000000000) [ 3367.433086][T13061] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3367.441207][T13061] ath9k_htc: Failed to initialize the device [ 3367.473409][T29108] usb 1-1: ath9k_htc: USB layer deinitialized 00:48:36 executing program 4: r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000080)={0x2}, 0x0) 00:48:36 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x6d8}, 0x0) 00:48:37 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x4000000}]) 00:48:37 executing program 4: prctl$PR_SET_MM(0x1b, 0x0, &(0x7f0000ffd000/0x1000)=nil) 00:48:37 executing program 0: r0 = syz_io_uring_setup(0x66a7, &(0x7f0000000200), &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:48:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x4b00000000000000) 00:48:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c46"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:48:37 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 00:48:37 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x5000000}]) 00:48:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) open_tree(r4, &(0x7f0000000080)='.\x00', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r4, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r5, r6, 0x1]}, 0x80) r7 = openat$incfs(r2, &(0x7f0000000380)='.pending_reads\x00', 0x612000, 0x4a) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x15, &(0x7f0000000200)=@raw=[@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @generic={0x0, 0x8, 0xb, 0x4, 0x101}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000180)=""/60, 0x41100, 0xa, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x8, 0x6}, 0x10, 0x0, r2, 0x8, &(0x7f00000003c0)=[r7, r8, r2, r9, r10, r11, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x5, 0x5, 0x1}, {0x1, 0x5, 0xc, 0xb}, {0x1, 0x2, 0x10, 0xc}, {0x2, 0x4, 0x9, 0x6}, {0x0, 0x5, 0xe, 0x4}, {0x1, 0x4, 0x8, 0x4}, {0x2, 0x3, 0x6, 0x4}, {0x5, 0x1, 0x4, 0x9}]}, 0x90) 00:48:37 executing program 0: setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:48:38 executing program 4: syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)) 00:48:38 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x6000000}]) 00:48:38 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) 00:48:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x5c00000000000000) 00:48:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c46"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:48:38 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000046c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000f180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0) 00:48:38 executing program 0: syz_clone(0x10001300, 0x0, 0x0, 0x0, 0x0, 0x0) 00:48:38 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x6040000}]) 00:48:39 executing program 4: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x3f00}]) 00:48:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x7462040001000000) 00:48:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) open_tree(r4, &(0x7f0000000080)='.\x00', 0x1) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r4, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r5, r6, 0x1]}, 0x80) (async) r7 = openat$incfs(r2, &(0x7f0000000380)='.pending_reads\x00', 0x612000, 0x4a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x15, &(0x7f0000000200)=@raw=[@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @generic={0x0, 0x8, 0xb, 0x4, 0x101}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000180)=""/60, 0x41100, 0xa, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x8, 0x6}, 0x10, 0x0, r2, 0x8, &(0x7f00000003c0)=[r7, r8, r2, r9, r10, r11, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x5, 0x5, 0x1}, {0x1, 0x5, 0xc, 0xb}, {0x1, 0x2, 0x10, 0xc}, {0x2, 0x4, 0x9, 0x6}, {0x0, 0x5, 0xe, 0x4}, {0x1, 0x4, 0x8, 0x4}, {0x2, 0x3, 0x6, 0x4}, {0x5, 0x1, 0x4, 0x9}]}, 0x90) 00:48:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000058000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0xed, &(0x7f0000000200)="ebd461b1fcdf43411e305db69a7d7fb3926bcbb64ef75145bbf88d53a18fb7eec396044656af53253c01a4603e4156c5358956191178148ec6e8a882c0ccff05d9ce44d5937d055a5fc6b54de39d9fc7565b762b19d565a243359420e37d6e519c8104b012177dfffa00a4447fdeb3dd98eb33288d3834548ff179769c74b11562730a2c996c456f9e84397f3623d80a0e1bde330031275e4230bb794a5cf6eddc0cd1b55edafa5526b3f2ca1e787a66cdc0a823d9a1f2b8fce72108d59b107f72b708e13b5a958edfbb3d3d92e10337991d0929965841ad354060cabc6e9f37721222a56ae930b568fe865d74", 0x5, 0x0, &(0x7f0000000300)='iNN^c'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000004c0)={{r4}, "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"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000440)={0x10201, 0x1, 0x4, 0x2000, &(0x7f0000541000/0x2000)=nil}) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x1, 0xf000, 0x1000, &(0x7f0000684000/0x1000)=nil}) r6 = syz_open_dev$mouse(&(0x7f0000000480), 0xffffffffffffffd8, 0x2c000) fsmount(r6, 0x0, 0x70) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r7, 0xae80, 0x0) 00:48:39 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x7000000}]) 00:48:39 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c46"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:40 executing program 0: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0xfffffffb}]) 00:48:40 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x8000000}]) 00:48:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x778bfe6400000006) 00:48:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xe000000) 00:48:40 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x8100000}]) 00:48:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) open_tree(r4, &(0x7f0000000080)='.\x00', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r4, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r5, r6, 0x1]}, 0x80) r7 = openat$incfs(r2, &(0x7f0000000380)='.pending_reads\x00', 0x612000, 0x4a) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x15, &(0x7f0000000200)=@raw=[@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @generic={0x0, 0x8, 0xb, 0x4, 0x101}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000180)=""/60, 0x41100, 0xa, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x8, 0x6}, 0x10, 0x0, r2, 0x8, &(0x7f00000003c0)=[r7, r8, r2, r9, r10, r11, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x5, 0x5, 0x1}, {0x1, 0x5, 0xc, 0xb}, {0x1, 0x2, 0x10, 0xc}, {0x2, 0x4, 0x9, 0x6}, {0x0, 0x5, 0xe, 0x4}, {0x1, 0x4, 0x8, 0x4}, {0x2, 0x3, 0x6, 0x4}, {0x5, 0x1, 0x4, 0x9}]}, 0x90) 00:48:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x779b237900000006) 00:48:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:41 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x9000000}]) 00:48:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:41 executing program 0: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}]) 00:48:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shmat(0xffffffffffffffff, &(0x7f0000a65000/0x2000)=nil, 0x6000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:42 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x10000000}]) 00:48:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x779bfe6400000006) 00:48:42 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:42 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ff"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:42 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x18000000}]) 00:48:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shmat(0xffffffffffffffff, &(0x7f0000a65000/0x2000)=nil, 0x6000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x77fbe36700000006) 00:48:43 executing program 0: bpf$OBJ_GET_MAP(0x1d, &(0x7f00000000c0)=@o_path={0x0}, 0x14) 00:48:43 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1f3ffff8}]) 00:48:43 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shmat(0xffffffffffffffff, &(0x7f0000a65000/0x2000)=nil, 0x6000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:44 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1f400000}]) 00:48:44 executing program 0: socketpair(0x8, 0x0, 0x0, &(0x7f0000004f40)) 00:48:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x96e70a0000000000) 00:48:44 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x402c5828, &(0x7f0000000080)={{}, 'syz1\x00'}) 00:48:44 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x22000000}]) 00:48:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) 00:48:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x4, 0xa000}) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) r5 = socket(0x2b, 0x1, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000000380)=[{0x1, 0x1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/168, 0xa8}], &(0x7f0000000340)=[0x26cf10d3, 0x7f, 0x2, 0x3]}], 0x1) dup2(r4, r5) 00:48:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:45 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) 00:48:45 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x2e000000}]) 00:48:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000000c0)=""/210, 0x2e, 0xd2, 0x1}, 0x20) 00:48:45 executing program 0: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000180)) 00:48:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xa005000000000000) 00:48:46 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x40045565, &(0x7f0000000080)={{}, 'syz1\x00'}) 00:48:46 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x30000000}]) 00:48:46 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f00000028c0), 0xffffffffffffffff) 00:48:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x4, 0xa000}) (async) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async, rerun: 32) r5 = socket(0x2b, 0x1, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000000380)=[{0x1, 0x1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/168, 0xa8}], &(0x7f0000000340)=[0x26cf10d3, 0x7f, 0x2, 0x3]}], 0x1) dup2(r4, r5) 00:48:46 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003640)={0x6, 0xf, &(0x7f0000003480)=@ringbuf, &(0x7f0000003500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) 00:48:46 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x3f000000}]) 00:48:46 executing program 0: r0 = openat$hwrng(0xffffff9c, 0x0, 0x100, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x21d1, &(0x7f0000000500)={0x0, 0xcfba, 0x0, 0x0, 0x28e, 0x0, r0}) socketpair(0x0, 0x4, 0x0, &(0x7f0000000580)) openat$autofs(0xffffff9c, &(0x7f0000000740), 0x10000, 0x0) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) syz_open_dev$I2C(&(0x7f0000004b00), 0x40, 0x640) 00:48:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 00:48:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xbe91210000000000) 00:48:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:47 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x40000000}]) 00:48:47 executing program 1: io_setup(0x0, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000001100)) 00:48:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x4, 0xa000}) (async) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) r5 = socket(0x2b, 0x1, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000000380)=[{0x1, 0x1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/168, 0xa8}], &(0x7f0000000340)=[0x26cf10d3, 0x7f, 0x2, 0x3]}], 0x1) dup2(r4, r5) 00:48:47 executing program 0: io_uring_setup(0x0, &(0x7f0000000500)) 00:48:48 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x7d0e0000}]) 00:48:48 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f00000001c0)) 00:48:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xc0064c90817f0000) 00:48:48 executing program 0: socketpair(0x10, 0x0, 0x0, &(0x7f0000000380)) 00:48:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB="00208709"]}) 00:48:48 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xf4ffffff}]) 00:48:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "92de41db082c963ac4b52c11578e7bd3d2d5a76bc4b6a62c7f1f3b4aadc2f7f4f47e11b031fce250613412f12e03e982b8e76f72b43fefc7e7f4c1d9e9cc9e6a6357ae39e0d5ae3e59d781a028a634f6936fee170db0548d29e8115dd25b80"}, 0x74) 00:48:48 executing program 0: r0 = epoll_create1(0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x5460, 0x0) 00:48:49 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4c7e882b54", 0x5}]) 00:48:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}) 00:48:49 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xf8ff3f1f}]) 00:48:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xe84f060000000000) 00:48:49 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x40045564, &(0x7f0000000080)={{}, 'syz1\x00'}) 00:48:49 executing program 0: openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) 00:48:49 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040)="fbf5", 0x9}]) 00:48:50 executing program 0: clock_gettime(0x1, &(0x7f00000023c0)) 00:48:50 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xfbffffff}]) 00:48:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "92de41db082c963ac4b52c11578e7bd3d2d5a76bc4b6a62c7f1f3b4aadc2f7f4f47e11b031fce250613412f12e03e982b8e76f72b43fefc7e7f4c1d9e9cc9e6a6357ae39e0d5ae3e59d781a028a634f6936fee170db0548d29e8115dd25b80"}, 0x74) 00:48:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:48:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xe94f060000000000) 00:48:50 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x0, 0x0) syz_io_uring_setup(0x6bc6, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x322}, &(0x7f0000004d00), &(0x7f0000004d40)) 00:48:50 executing program 0: openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10b242, 0x0, 0x4}, 0x18) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 00:48:50 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xff600000}]) 00:48:51 executing program 0: syz_io_uring_setup(0x6345, &(0x7f0000000040)={0x0, 0x0, 0x200}, 0x0, 0x0) 00:48:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:48:51 executing program 1: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040)="fbf5aa64c71d79", 0x7}]) 00:48:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "92de41db082c963ac4b52c11578e7bd3d2d5a76bc4b6a62c7f1f3b4aadc2f7f4f47e11b031fce250613412f12e03e982b8e76f72b43fefc7e7f4c1d9e9cc9e6a6357ae39e0d5ae3e59d781a028a634f6936fee170db0548d29e8115dd25b80"}, 0x74) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "92de41db082c963ac4b52c11578e7bd3d2d5a76bc4b6a62c7f1f3b4aadc2f7f4f47e11b031fce250613412f12e03e982b8e76f72b43fefc7e7f4c1d9e9cc9e6a6357ae39e0d5ae3e59d781a028a634f6936fee170db0548d29e8115dd25b80"}, 0x74) (async) 00:48:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xfc7f000000000000) 00:48:51 executing program 0: bpf$OBJ_GET_MAP(0x12, 0x0, 0x0) 00:48:51 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffefffff}]) 00:48:51 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:48:51 executing program 0: syz_open_dev$I2C(&(0x7f0000004b00), 0x0, 0x0) 00:48:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:48:52 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffffe703}]) 00:48:52 executing program 1: bpf$OBJ_GET_MAP(0x22, 0x0, 0x0) 00:48:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xfdfdffff00000000) 00:48:52 executing program 0: syz_io_uring_setup(0x4ce, &(0x7f0000000000), 0x0, 0x0) 00:48:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a40)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="340000000108000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14"], 0x5c}, 0x0) 00:48:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:48:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c03d9c492990db19b60048e5d4134d0000f1ff00fbcdd50c8d72a9c69b0002000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:52 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffffefff}]) 00:48:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:53 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x14) 00:48:53 executing program 0: socketpair(0x1e, 0x0, 0x8, &(0x7f0000000040)) 00:48:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xffffff7f00000000) 00:48:53 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 00:48:53 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xfffffff4}]) 00:48:53 executing program 0: syz_io_uring_setup(0x80017bf, &(0x7f0000000540), 0x0, 0x0) 00:48:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c03d9c492990db19b60048e5d4134d0000f1ff00fbcdd50c8d72a9c69b0002000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c03d9c492990db19b60048e5d4134d0000f1ff00fbcdd50c8d72a9c69b0002000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:48:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000180)) 00:48:54 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xfffffffb}]) [ 3385.232973][T29108] usb 2-1: new high-speed USB device number 97 using dummy_hcd 00:48:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xffffffff00000000) 00:48:54 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x1f, &(0x7f0000000540)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e784c4ca672bbb3b0134d0c63e3f0903"}, @generic={0x3, 0x10, 0x3}]}}) [ 3385.748343][T29108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 3385.760304][T29108] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3385.770612][T29108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3385.780860][T29108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 00:48:54 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1000357bb}]) 00:48:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3386.004902][T29108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3386.015298][T29108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.024466][T29108] usb 2-1: Product: syz [ 3386.028936][T29108] usb 2-1: Manufacturer: syz [ 3386.035028][T29108] usb 2-1: SerialNumber: syz [ 3386.181156][T13061] usb 1-1: new high-speed USB device number 20 using dummy_hcd 00:48:55 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x80000000000}]) [ 3386.403424][T29108] cdc_ncm 2-1:1.0: bind() failure [ 3386.421898][T29108] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3386.429094][T29108] cdc_ncm 2-1:1.1: bind() failure [ 3386.578785][T29108] usb 2-1: USB disconnect, device number 97 [ 3386.691588][T13061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3386.703284][T13061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3386.716683][T13061] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3386.727247][T13061] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3386.737528][T13061] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3386.747892][T13061] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3386.971379][T13061] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3386.981013][T13061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.989295][T13061] usb 1-1: Product: syz [ 3386.995083][T13061] usb 1-1: Manufacturer: syz [ 3387.000051][T13061] usb 1-1: SerialNumber: syz 00:48:56 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:48:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c03d9c492990db19b60048e5d4134d0000f1ff00fbcdd50c8d72a9c69b0002000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffff600000) 00:48:56 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x401f00000000}]) 00:48:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3387.371690][T13061] cdc_ncm 1-1:1.0: bind() failure [ 3387.458645][T13061] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 3387.466151][T13061] cdc_ncm 1-1:1.1: bind() failure 00:48:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x806, 0xffffffffffffffff, 0x7fff}, 0x48) [ 3387.652939][T13061] usb 1-1: USB disconnect, device number 20 00:48:56 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x60ffffffffff}]) 00:48:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) 00:48:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c02e8ddb68090000cd8fc0a6f333e1cfa95ccb180d008ed4d3afeaa023d1c90faaee4d000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002a80)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}}, 0x0) 00:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000200)={0x4, 0x0, [{0x400, 0x3, 0x0, 0x0, @sint={0x8, 0x1ff}}, {0x6, 0x4, 0x0, 0x0, @sint={0x3ff, 0xff}}, {0xf7ca216c, 0x3, 0x0, 0x0, @msi={0x2, 0x4, 0x800, 0x10001}}, {0x4fc, 0x3, 0x0, 0x0, @sint={0xffffff94, 0x7ff}}]}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:48:57 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x10000000000000}]) [ 3388.291024][T18716] @: renamed from ip_vti0 (while UP) 00:48:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 00:48:57 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:48:58 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x20000000000000}]) 00:48:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f00000001c0)) [ 3389.180415][T13208] usb 2-1: new high-speed USB device number 98 using dummy_hcd 00:48:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async, rerun: 64) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000200)={0x4, 0x0, [{0x400, 0x3, 0x0, 0x0, @sint={0x8, 0x1ff}}, {0x6, 0x4, 0x0, 0x0, @sint={0x3ff, 0xff}}, {0xf7ca216c, 0x3, 0x0, 0x0, @msi={0x2, 0x4, 0x800, 0x10001}}, {0x4fc, 0x3, 0x0, 0x0, @sint={0xffffff94, 0x7ff}}]}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async, rerun: 64) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:48:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) [ 3389.453086][T13208] usb 2-1: Using ep0 maxpacket: 32 00:48:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:48:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c02e8ddb68090000cd8fc0a6f333e1cfa95ccb180d008ed4d3afeaa023d1c90faaee4d000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c02e8ddb68090000cd8fc0a6f333e1cfa95ccb180d008ed4d3afeaa023d1c90faaee4d000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffd) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:48:58 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x100000000000000}]) [ 3389.612307][T13208] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3389.622793][T13208] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3389.634415][T13208] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3389.644824][T13208] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 00:48:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890b, 0xfffffffffffffffe) [ 3389.941213][T13208] usb 2-1: string descriptor 0 read error: -22 [ 3389.948393][T13208] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3389.958046][T13208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:48:59 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000280)={0x18, 0x1, 0x1, 0x0, r2}) 00:48:59 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x200000000000000}]) [ 3390.340562][T13208] cdc_ncm 2-1:1.0: bind() failure [ 3390.358970][T13208] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3390.366505][T13208] cdc_ncm 2-1:1.1: bind() failure 00:48:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000200)={0x4, 0x0, [{0x400, 0x3, 0x0, 0x0, @sint={0x8, 0x1ff}}, {0x6, 0x4, 0x0, 0x0, @sint={0x3ff, 0xff}}, {0xf7ca216c, 0x3, 0x0, 0x0, @msi={0x2, 0x4, 0x800, 0x10001}}, {0x4fc, 0x3, 0x0, 0x0, @sint={0xffffff94, 0x7ff}}]}) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 3390.544216][T13208] usb 2-1: USB disconnect, device number 98 00:49:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8934, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) 00:49:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) 00:49:00 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x204000000000000}]) 00:49:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c02e8ddb68090000cd8fc0a6f333e1cfa95ccb180d008ed4d3afeaa023d1c90faaee4d000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffd) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44851) 00:49:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8917, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) 00:49:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x1) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280100003600000428bd7000fedbdf25150103807cb6f8bf1aa62c27642512fc000c90efd53e1d9c8d202b0657df0821b7dee958f4f4698a644e2d84c489a52d310402a14e10bdaa700f702bd3eb515ab558c6975c0290e1aa8fa95e0da7fb65c69908844e371bdaec72e358bcb99e02fdc27b3a8bd6da0be6b4ff6bd5515edbfab32a5948d58677ef4408005400", @ANYRES32=0x0, @ANYBLOB="08008200ffffffff16baf05be6d6602288869d809c4e5765f7beb90365cac00a389dc8269b704bee0283565670afce2c4d7f4fd506a2e71a040f39253c9bc15cff03c76c387275eacff328a9fcb74c83016cc7088b1b2e1a9698e6c7051de858a17659889e014533b2b296c6b45d64b0b22965166efb34792b9f8371fe0ee7c582afa232a75c9761940a39956b328375ddf05128b16b"], 0x128}, {&(0x7f0000001680)={0xb0, 0x3e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x6}, @nested={0x8d, 0x8b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @typed={0x8, 0x48, 0x0, 0x0, @fd}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="41a86662b5cb89a5d37722ee951e6490fa5032ba8076fa012c18898df7e7a2c37bb9936918693451294b62d81073968446fd3ae57962f4dd8d73a6c2024b098e2ed51d3f453073ef4187eeaa57c9303a6615e84d8a81cc6c35eb88b91e3ec55481fd09acb3"]}]}, 0xb0}], 0x2, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x4040000}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xd, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, @generic={0x5, 0xb, 0x1, 0xbfe8, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @ldst={0x0, 0x2, 0x3, 0x1, 0x5, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x6}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0xf3, 0x4}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="950000020000000018000000070000000000000000f0ffff8500000057000000"], &(0x7f00000000c0)='GPL\x00', 0x7fff, 0xee, &(0x7f0000000100)=""/238, 0x40f00, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x0, 0x6}, 0x10}, 0x80) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r5, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xfffffff7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x2, 0x8, 0x40}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x5f, 0xa, &(0x7f00000000c0)=""/10, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0xff, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, 0xffffffffffffffff, 0x1]}, 0x80) r6 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) open_tree(r7, &(0x7f0000000080)='.\x00', 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r7, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r8, r9, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x2, 0x3, 0x1, 0x3, 0x4, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xe59, 0x3d, &(0x7f0000000180)=""/61, 0x41100, 0x10, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x9, 0xfffffffa}, 0x10, 0x0, r2, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0xb, 0xb}, {0x1, 0x2, 0x9, 0x4}], 0x10, 0xffffffff}, 0x90) 00:49:00 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x300000000000000}]) 00:49:00 executing program 0: syz_emit_ethernet(0x11, &(0x7f0000000000)={@dev, @broadcast, @void, {@x25}}, 0x0) 00:49:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) 00:49:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)) 00:49:01 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x400000000000000}]) 00:49:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0f78000000000000000000000000000000acb9a721"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8018, r0}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = signalfd(r0, &(0x7f0000000480)={[0x100000001]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x531c}, [@generic={0x4, 0x1, 0x8, 0x0, 0xc2}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x3, 0x0, 0x3, 0x2, 0x4, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0x42, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x3f, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[r5, r2, r2, r6, r7, r2, r8, r2], &(0x7f0000000540), 0x10, 0x1}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f0000000200)={0x1, 0x0, 0xce, 0x5}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r10, 0xae80, 0x0) 00:49:01 executing program 1: r0 = socket(0x26, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) 00:49:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xffffffff, 0x4) 00:49:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x1) (async) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280100003600000428bd7000fedbdf25150103807cb6f8bf1aa62c27642512fc000c90efd53e1d9c8d202b0657df0821b7dee958f4f4698a644e2d84c489a52d310402a14e10bdaa700f702bd3eb515ab558c6975c0290e1aa8fa95e0da7fb65c69908844e371bdaec72e358bcb99e02fdc27b3a8bd6da0be6b4ff6bd5515edbfab32a5948d58677ef4408005400", @ANYRES32=0x0, @ANYBLOB="08008200ffffffff16baf05be6d6602288869d809c4e5765f7beb90365cac00a389dc8269b704bee0283565670afce2c4d7f4fd506a2e71a040f39253c9bc15cff03c76c387275eacff328a9fcb74c83016cc7088b1b2e1a9698e6c7051de858a17659889e014533b2b296c6b45d64b0b22965166efb34792b9f8371fe0ee7c582afa232a75c9761940a39956b328375ddf05128b16b"], 0x128}, {&(0x7f0000001680)={0xb0, 0x3e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x6}, @nested={0x8d, 0x8b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @typed={0x8, 0x48, 0x0, 0x0, @fd}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="41a86662b5cb89a5d37722ee951e6490fa5032ba8076fa012c18898df7e7a2c37bb9936918693451294b62d81073968446fd3ae57962f4dd8d73a6c2024b098e2ed51d3f453073ef4187eeaa57c9303a6615e84d8a81cc6c35eb88b91e3ec55481fd09acb3"]}]}, 0xb0}], 0x2, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x4040000}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xd, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, @generic={0x5, 0xb, 0x1, 0xbfe8, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @ldst={0x0, 0x2, 0x3, 0x1, 0x5, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x6}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0xf3, 0x4}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="950000020000000018000000070000000000000000f0ffff8500000057000000"], &(0x7f00000000c0)='GPL\x00', 0x7fff, 0xee, &(0x7f0000000100)=""/238, 0x40f00, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x0, 0x6}, 0x10}, 0x80) (async) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r5, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xfffffff7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x2, 0x8, 0x40}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x5f, 0xa, &(0x7f00000000c0)=""/10, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0xff, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, 0xffffffffffffffff, 0x1]}, 0x80) (async) r6 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) open_tree(r7, &(0x7f0000000080)='.\x00', 0x1) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r7, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r8, r9, 0x1]}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x2, 0x3, 0x1, 0x3, 0x4, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xe59, 0x3d, &(0x7f0000000180)=""/61, 0x41100, 0x10, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x9, 0xfffffffa}, 0x10, 0x0, r2, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0xb, 0xb}, {0x1, 0x2, 0x9, 0x4}], 0x10, 0xffffffff}, 0x90) (rerun: 32) 00:49:02 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='s', 0x1}], 0x1}, 0x8c4) sendmsg$kcm(r0, &(0x7f0000001480)={0x0, 0xffffff7f, &(0x7f0000001300)=[{&(0x7f0000000100)="e8", 0x1}], 0x300}, 0x0) 00:49:02 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x500000000000000}]) 00:49:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) 00:49:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000180)) 00:49:02 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[], 0x2660}, 0x0) 00:49:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x1) (async) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x1) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) (async) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280100003600000428bd7000fedbdf25150103807cb6f8bf1aa62c27642512fc000c90efd53e1d9c8d202b0657df0821b7dee958f4f4698a644e2d84c489a52d310402a14e10bdaa700f702bd3eb515ab558c6975c0290e1aa8fa95e0da7fb65c69908844e371bdaec72e358bcb99e02fdc27b3a8bd6da0be6b4ff6bd5515edbfab32a5948d58677ef4408005400", @ANYRES32=0x0, @ANYBLOB="08008200ffffffff16baf05be6d6602288869d809c4e5765f7beb90365cac00a389dc8269b704bee0283565670afce2c4d7f4fd506a2e71a040f39253c9bc15cff03c76c387275eacff328a9fcb74c83016cc7088b1b2e1a9698e6c7051de858a17659889e014533b2b296c6b45d64b0b22965166efb34792b9f8371fe0ee7c582afa232a75c9761940a39956b328375ddf05128b16b"], 0x128}, {&(0x7f0000001680)={0xb0, 0x3e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x6}, @nested={0x8d, 0x8b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @typed={0x8, 0x48, 0x0, 0x0, @fd}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="41a86662b5cb89a5d37722ee951e6490fa5032ba8076fa012c18898df7e7a2c37bb9936918693451294b62d81073968446fd3ae57962f4dd8d73a6c2024b098e2ed51d3f453073ef4187eeaa57c9303a6615e84d8a81cc6c35eb88b91e3ec55481fd09acb3"]}]}, 0xb0}], 0x2, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x4040000}, 0x4801) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xd, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, @generic={0x5, 0xb, 0x1, 0xbfe8, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @ldst={0x0, 0x2, 0x3, 0x1, 0x5, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x6}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0xf3, 0x4}, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="950000020000000018000000070000000000000000f0ffff8500000057000000"], &(0x7f00000000c0)='GPL\x00', 0x7fff, 0xee, &(0x7f0000000100)=""/238, 0x40f00, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0x0, 0x6}, 0x10}, 0x80) creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r5, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) (async) io_submit(r5, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xfffffff7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x2, 0x8, 0x40}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x5f, 0xa, &(0x7f00000000c0)=""/10, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0xff, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, 0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xfffffff7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x2, 0x8, 0x40}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x5f, 0xa, &(0x7f00000000c0)=""/10, 0x41100, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0xff, 0x3f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, 0xffffffffffffffff, 0x1]}, 0x80) r6 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) open_tree(r7, &(0x7f0000000080)='.\x00', 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r7, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r8, r9, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67046d9a}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xd7, &(0x7f0000000100)=""/215, 0x41000, 0x5, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x4, 0x80, 0x800}, 0x10, 0x0, r7, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r8, r9, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x2, 0x3, 0x1, 0x3, 0x4, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xe59, 0x3d, &(0x7f0000000180)=""/61, 0x41100, 0x10, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x9, 0xfffffffa}, 0x10, 0x0, r2, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0xb, 0xb}, {0x1, 0x2, 0x9, 0x4}], 0x10, 0xffffffff}, 0x90) 00:49:02 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x600000000000000}]) 00:49:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:03 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}}) 00:49:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) 00:49:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0f78000000000000000000000000000000acb9a721"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8018, r0}, 0x18) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = signalfd(r0, &(0x7f0000000480)={[0x100000001]}, 0x8) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x531c}, [@generic={0x4, 0x1, 0x8, 0x0, 0xc2}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x3, 0x0, 0x3, 0x2, 0x4, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0x42, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x3f, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[r5, r2, r2, r6, r7, r2, r8, r2], &(0x7f0000000540), 0x10, 0x1}, 0x90) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f0000000200)={0x1, 0x0, 0xce, 0x5}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r10, 0xae80, 0x0) 00:49:03 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x604000000000000}]) 00:49:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000500)={'ip_vti0\x00', 0x0}) [ 3394.723075][T12584] usb 2-1: new high-speed USB device number 99 using dummy_hcd 00:49:03 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x700000000000000}]) 00:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000200)={0xb7, 0x0, 0x8, 0x101}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0f78000000000000000000000000000000acb9a721"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8018, r0}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) signalfd(r0, &(0x7f0000000480)={[0x100000001]}, 0x8) (async) r5 = signalfd(r0, &(0x7f0000000480)={[0x100000001]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x531c}, [@generic={0x4, 0x1, 0x8, 0x0, 0xc2}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x3, 0x0, 0x3, 0x2, 0x4, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0x42, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x3f, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[r5, r2, r2, r6, r7, r2, r8, r2], &(0x7f0000000540), 0x10, 0x1}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x531c}, [@generic={0x4, 0x1, 0x8, 0x0, 0xc2}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x3, 0x0, 0x3, 0x2, 0x4, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x27, &(0x7f0000000380)=""/39, 0x41000, 0x42, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x3f, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[r5, r2, r2, r6, r7, r2, r8, r2], &(0x7f0000000540), 0x10, 0x1}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f0000000200)={0x1, 0x0, 0xce, 0x5}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 00:49:04 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl(r0, 0x1, &(0x7f0000000000)) [ 3395.269754][T12584] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3395.281819][T12584] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3395.294346][T12584] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3395.305471][T12584] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3395.316922][T12584] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3395.327255][T12584] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 00:49:04 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x800000000000000}]) [ 3395.556239][T12584] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3395.565873][T12584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.574499][T12584] usb 2-1: Product: syz [ 3395.579102][T12584] usb 2-1: Manufacturer: syz [ 3395.584227][T12584] usb 2-1: SerialNumber: syz 00:49:04 executing program 0: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x400002, 0xe0601348ef5c4dd1}, 0x18) [ 3395.945895][T12584] cdc_ncm 2-1:1.0: bind() failure [ 3395.965790][T12584] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3395.973111][T12584] cdc_ncm 2-1:1.1: bind() failure 00:49:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3396.169812][T12584] usb 2-1: USB disconnect, device number 99 00:49:05 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 00:49:05 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x810000000000000}]) 00:49:05 executing program 0: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) 00:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000200)={0xb7, 0x0, 0x8, 0x101}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60fa7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:06 executing program 0: openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0x901901, 0x0) 00:49:06 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$sequencer(r0, 0x0, 0x0) 00:49:06 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x900000000000000}]) 00:49:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000028c0), r0) pipe2$watch_queue(&(0x7f0000002bc0), 0x80) inotify_init1(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000004bc0), 0xffffffffffffffff) 00:49:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000200)={0xb7, 0x0, 0x8, 0x101}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000200)={0xb7, 0x0, 0x8, 0x101}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 00:49:06 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1000000000000000}]) 00:49:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60fa7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:07 executing program 0: bpf$OBJ_GET_MAP(0x4, 0x0, 0x0) 00:49:07 executing program 1: r0 = epoll_create1(0x0) close(r0) 00:49:07 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1800000000000000}]) 00:49:07 executing program 0: r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 00:49:07 executing program 1: openat$nci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 00:49:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:08 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x2200000000000000}]) 00:49:08 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_setup(0x300, &(0x7f0000000140)=0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="fbf5", 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="c40c3cb44654845fa910a765e34fcfad7d8006b7683683cfec2ce4dea29003857ae2198ff07472409979d44fc8de978ae3bed4fe0d38c82bda9b804dfc09be6298ef9e2c0fe1420c8dac713ec6a1c7a4b6b83de8e770a388609d227ba8339264e84f0a24c6f949dcff4a93424ae93bd32e6c1471f5f19f602eb2245ae9852f87d82ceb3ed9587c4c", 0xfffffffffffffeaf, 0x5, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="ba5e2f009ec57b5050c7189de72720b185c9b63e6478fc746e541027f250e57d8ab36f1778929ba653ba8b81142f665b202744e91012c4466f258dfa2e55b6a3014aeb6a702a3eb6612790393577a63fc3ed3c279c5b5e143e78afcdc7dcc3a0d99dcd8928285afb8cdfc197b6c418daa4f06b61664935e97e63b4917fbda328cf9d574d17a4a452a5f9e938880e83c4b80e390bb368b96091b5db875a71e5012c8022d259770340108bcb5fa8d87722a5b33d315e1e97a2f7a5aa72f389252b51ad4025691ce128c48dd5e60846890dc1df1cdb6a771a96cc34cc0f2b43ee10b8e8740a524fcdb887a24bda", 0xec, 0x9, 0x0, 0x1}]) 00:49:08 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x4004556e, &(0x7f0000000080)={{}, 'syz1\x00'}) 00:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e581778e579c27fff494fdc0162310faaee4d008210000000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000003c0)={0x7, &(0x7f00000006c0)=[{0x7f, 0x3d, &(0x7f0000000100)="fe3e28abd7f84eada44482afcbc2910e46bac87facbcf0aba51537ceea5f9ee5ae2d3caf1513b0a7a3f727dbf860ec9a022d3bab4652bb547b55677bb8", 0x1, 0x1}, {0x1, 0x99, &(0x7f0000000200)="1db5c1d6b94ae9d1a60ce56ff06c9a70554c7a961bc22902694386a729416cfba116c7f25e5a649b2dea9cfbba6930dbc4dde34657c2c93a03fc79132e601b482b0dec765ce4cf79d4f9758d17016aa491c5b565463ae50a8055048c8408607543eb7f1efe306482332f13a8794bcf85b6055cf3b453b520f12e8f4266d9938f969f2e9a4ba095f52b005989e75ca8d202533549d8e8bc4e64", 0x1, 0x1}, {0x2, 0xc9, &(0x7f00000002c0)="cc9a2c99efbf6be892a367bc5d2672c5dc1d00e0ebc6ad871a5b46b9465a1dc7d9268e18663e6512981d9d367b87b4d95006fd8b73e336d512440da11d8ebb3c06a0c6fd13ead771d522a2908aba121378e2bd4d01798f3b5a4da73122dfdb1799bf94ccd8016247c41d7eb7e63a48c0d968301c9d193ca8932ed01e76e252eb8a50dfe6a7002480d465678cd270a04116128004efd9ca92996dbcaae6151b9f8f5ec458e9e2e45b372427a214340e28acca98d6101f64877be5e0b5db1f1975f0dc44ffc4fe2c63d9", 0x1}, {0xf23b, 0x20, &(0x7f0000000180)="c02540f675a44227e9ecf4b070b551a90139e14a9d8f072b0981adeaa56fed27", 0x0, 0x1}, {0xb4f, 0xd7, &(0x7f0000000440)="ae44dc901b10a957c5d357e5277fa53254ac969caf00cd77e2cd53ce4eb043cf1a59043c2f0fd177d70e7f0d5fbbfe82e55e90fa367d4ceeed843e343257cd6a159ae1e2cbdee025036bc8f8160119300acc01ee06f423c5131c86398aa6704b8ab30fe86c39105bb12d0a552bc571afb9f57cca14d531d5e8260732137e4bb29268fe3af782decedb1de0c0ff69b90d1ce693d167fb59575482f7dfa05973ade0ef347ed8f507c37c0111f9fae0ecfe06b534923a8942ab90b9d4f57cfb77042182b877846e4130f9cd7aa1157e6e1e1d3ede7610dd13", 0x1}, {0x2, 0x70, &(0x7f0000000540)="88053420be5c2cae8dd1b2b543131c1f2c73253eaf5bd533628f350e71c6878530dbc7a92b6c6e56ac055ae173f039955c79dd7cd9b3d8dbd35b5246da25de15d96107786c82699951d8c4465a5ec6166b794ad962b45738a4bad14a4b8ce46a6f39266221333bd9803e33e2340d7bbb", 0x1}, {0x1, 0xcf, &(0x7f00000005c0)="f2bad04c2e78ccf3d1008d1364da9e00d277766d4a4ba88ca74d25880afb7a5587b968aafb6b15d3300c06ef9808c5370a6cb640b04082518a24cb2194c8511e6975e893aed09f11c3394ec57aaec94ab0f6690b401f8fb0e11a35bedf1e65aed7a37e5323e8a413f2ddcaefacd3985e2b6e66b0ce33e12de7ef0e5f33515e7b00b7dd3209dbe130338afe29eea3b746a1536c606b44e5fe41e39cfa5f80dbe92c3f90fba1248f10b0527b0526eab5c64b835c3fa1cc4b8027d8bdf834f7979aa92b05c07f82f6d499001452c7ea1d"}]}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60fa7"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:08 executing program 1: syz_io_uring_setup(0x2352, &(0x7f0000002200)={0x0, 0x0, 0x800}, 0x0, 0x0) 00:49:08 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x2e00000000000000}]) 00:49:08 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d, 0x30, 0xffffffffffffffff, 0x10000000) 00:49:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:09 executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) 00:49:09 executing program 0: r0 = io_uring_setup(0x4d, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, 0xffffffffffffffff], 0x2) 00:49:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60daaee4d0000000000000189ea517ffa897cac0f78"], 0x208e24b) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10000, 0x94c00) getsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0xfffffffd}, 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:09 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x3000000000000000}]) 00:49:09 executing program 0: bpf$OBJ_GET_MAP(0x3, 0x0, 0x0) 00:49:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x34}}, 0x0) 00:49:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e581778e579c27fff494fdc0162310faaee4d008210000000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000003c0)={0x7, &(0x7f00000006c0)=[{0x7f, 0x3d, &(0x7f0000000100)="fe3e28abd7f84eada44482afcbc2910e46bac87facbcf0aba51537ceea5f9ee5ae2d3caf1513b0a7a3f727dbf860ec9a022d3bab4652bb547b55677bb8", 0x1, 0x1}, {0x1, 0x99, &(0x7f0000000200)="1db5c1d6b94ae9d1a60ce56ff06c9a70554c7a961bc22902694386a729416cfba116c7f25e5a649b2dea9cfbba6930dbc4dde34657c2c93a03fc79132e601b482b0dec765ce4cf79d4f9758d17016aa491c5b565463ae50a8055048c8408607543eb7f1efe306482332f13a8794bcf85b6055cf3b453b520f12e8f4266d9938f969f2e9a4ba095f52b005989e75ca8d202533549d8e8bc4e64", 0x1, 0x1}, {0x2, 0xc9, &(0x7f00000002c0)="cc9a2c99efbf6be892a367bc5d2672c5dc1d00e0ebc6ad871a5b46b9465a1dc7d9268e18663e6512981d9d367b87b4d95006fd8b73e336d512440da11d8ebb3c06a0c6fd13ead771d522a2908aba121378e2bd4d01798f3b5a4da73122dfdb1799bf94ccd8016247c41d7eb7e63a48c0d968301c9d193ca8932ed01e76e252eb8a50dfe6a7002480d465678cd270a04116128004efd9ca92996dbcaae6151b9f8f5ec458e9e2e45b372427a214340e28acca98d6101f64877be5e0b5db1f1975f0dc44ffc4fe2c63d9", 0x1}, {0xf23b, 0x20, &(0x7f0000000180)="c02540f675a44227e9ecf4b070b551a90139e14a9d8f072b0981adeaa56fed27", 0x0, 0x1}, {0xb4f, 0xd7, &(0x7f0000000440)="ae44dc901b10a957c5d357e5277fa53254ac969caf00cd77e2cd53ce4eb043cf1a59043c2f0fd177d70e7f0d5fbbfe82e55e90fa367d4ceeed843e343257cd6a159ae1e2cbdee025036bc8f8160119300acc01ee06f423c5131c86398aa6704b8ab30fe86c39105bb12d0a552bc571afb9f57cca14d531d5e8260732137e4bb29268fe3af782decedb1de0c0ff69b90d1ce693d167fb59575482f7dfa05973ade0ef347ed8f507c37c0111f9fae0ecfe06b534923a8942ab90b9d4f57cfb77042182b877846e4130f9cd7aa1157e6e1e1d3ede7610dd13", 0x1}, {0x2, 0x70, &(0x7f0000000540)="88053420be5c2cae8dd1b2b543131c1f2c73253eaf5bd533628f350e71c6878530dbc7a92b6c6e56ac055ae173f039955c79dd7cd9b3d8dbd35b5246da25de15d96107786c82699951d8c4465a5ec6166b794ad962b45738a4bad14a4b8ce46a6f39266221333bd9803e33e2340d7bbb", 0x1}, {0x1, 0xcf, &(0x7f00000005c0)="f2bad04c2e78ccf3d1008d1364da9e00d277766d4a4ba88ca74d25880afb7a5587b968aafb6b15d3300c06ef9808c5370a6cb640b04082518a24cb2194c8511e6975e893aed09f11c3394ec57aaec94ab0f6690b401f8fb0e11a35bedf1e65aed7a37e5323e8a413f2ddcaefacd3985e2b6e66b0ce33e12de7ef0e5f33515e7b00b7dd3209dbe130338afe29eea3b746a1536c606b44e5fe41e39cfa5f80dbe92c3f90fba1248f10b0527b0526eab5c64b835c3fa1cc4b8027d8bdf834f7979aa92b05c07f82f6d499001452c7ea1d"}]}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e581778e579c27fff494fdc0162310faaee4d008210000000000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000003c0)={0x7, &(0x7f00000006c0)=[{0x7f, 0x3d, &(0x7f0000000100)="fe3e28abd7f84eada44482afcbc2910e46bac87facbcf0aba51537ceea5f9ee5ae2d3caf1513b0a7a3f727dbf860ec9a022d3bab4652bb547b55677bb8", 0x1, 0x1}, {0x1, 0x99, &(0x7f0000000200)="1db5c1d6b94ae9d1a60ce56ff06c9a70554c7a961bc22902694386a729416cfba116c7f25e5a649b2dea9cfbba6930dbc4dde34657c2c93a03fc79132e601b482b0dec765ce4cf79d4f9758d17016aa491c5b565463ae50a8055048c8408607543eb7f1efe306482332f13a8794bcf85b6055cf3b453b520f12e8f4266d9938f969f2e9a4ba095f52b005989e75ca8d202533549d8e8bc4e64", 0x1, 0x1}, {0x2, 0xc9, &(0x7f00000002c0)="cc9a2c99efbf6be892a367bc5d2672c5dc1d00e0ebc6ad871a5b46b9465a1dc7d9268e18663e6512981d9d367b87b4d95006fd8b73e336d512440da11d8ebb3c06a0c6fd13ead771d522a2908aba121378e2bd4d01798f3b5a4da73122dfdb1799bf94ccd8016247c41d7eb7e63a48c0d968301c9d193ca8932ed01e76e252eb8a50dfe6a7002480d465678cd270a04116128004efd9ca92996dbcaae6151b9f8f5ec458e9e2e45b372427a214340e28acca98d6101f64877be5e0b5db1f1975f0dc44ffc4fe2c63d9", 0x1}, {0xf23b, 0x20, &(0x7f0000000180)="c02540f675a44227e9ecf4b070b551a90139e14a9d8f072b0981adeaa56fed27", 0x0, 0x1}, {0xb4f, 0xd7, &(0x7f0000000440)="ae44dc901b10a957c5d357e5277fa53254ac969caf00cd77e2cd53ce4eb043cf1a59043c2f0fd177d70e7f0d5fbbfe82e55e90fa367d4ceeed843e343257cd6a159ae1e2cbdee025036bc8f8160119300acc01ee06f423c5131c86398aa6704b8ab30fe86c39105bb12d0a552bc571afb9f57cca14d531d5e8260732137e4bb29268fe3af782decedb1de0c0ff69b90d1ce693d167fb59575482f7dfa05973ade0ef347ed8f507c37c0111f9fae0ecfe06b534923a8942ab90b9d4f57cfb77042182b877846e4130f9cd7aa1157e6e1e1d3ede7610dd13", 0x1}, {0x2, 0x70, &(0x7f0000000540)="88053420be5c2cae8dd1b2b543131c1f2c73253eaf5bd533628f350e71c6878530dbc7a92b6c6e56ac055ae173f039955c79dd7cd9b3d8dbd35b5246da25de15d96107786c82699951d8c4465a5ec6166b794ad962b45738a4bad14a4b8ce46a6f39266221333bd9803e33e2340d7bbb", 0x1}, {0x1, 0xcf, &(0x7f00000005c0)="f2bad04c2e78ccf3d1008d1364da9e00d277766d4a4ba88ca74d25880afb7a5587b968aafb6b15d3300c06ef9808c5370a6cb640b04082518a24cb2194c8511e6975e893aed09f11c3394ec57aaec94ab0f6690b401f8fb0e11a35bedf1e65aed7a37e5323e8a413f2ddcaefacd3985e2b6e66b0ce33e12de7ef0e5f33515e7b00b7dd3209dbe130338afe29eea3b746a1536c606b44e5fe41e39cfa5f80dbe92c3f90fba1248f10b0527b0526eab5c64b835c3fa1cc4b8027d8bdf834f7979aa92b05c07f82f6d499001452c7ea1d"}]}) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 00:49:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:10 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x3f00000000000000}]) 00:49:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2}, 0x20) pipe2$9p(&(0x7f00000003c0), 0x0) 00:49:10 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x6280, 0x0) 00:49:10 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60daaee4d0000000000000189ea517ffa897cac0f78"], 0x208e24b) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10000, 0x94c00) getsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0xfffffffd}, 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:49:10 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x4000000000000000}]) 00:49:10 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x5, &(0x7f00000009c0)=@framed={{}, [@btf_id]}, &(0x7f0000000b40)='GPL\x00'}, 0x90) 00:49:10 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 00:49:11 executing program 1: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x2e, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf, @snprintf, @btf_id, @alu={0x0, 0x0, 0x0, 0x4, 0xb, 0x18}, @ringbuf_output, @tail_call]}, &(0x7f0000000b40)='GPL\x00', 0x0, 0xa8, &(0x7f0000000b80)=""/168, 0x0, 0x72}, 0x90) 00:49:11 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x7d0e000000000000}]) 00:49:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x1616, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) 00:49:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e581778e579c27fff494fdc0162310faaee4d008210000000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000003c0)={0x7, &(0x7f00000006c0)=[{0x7f, 0x3d, &(0x7f0000000100)="fe3e28abd7f84eada44482afcbc2910e46bac87facbcf0aba51537ceea5f9ee5ae2d3caf1513b0a7a3f727dbf860ec9a022d3bab4652bb547b55677bb8", 0x1, 0x1}, {0x1, 0x99, &(0x7f0000000200)="1db5c1d6b94ae9d1a60ce56ff06c9a70554c7a961bc22902694386a729416cfba116c7f25e5a649b2dea9cfbba6930dbc4dde34657c2c93a03fc79132e601b482b0dec765ce4cf79d4f9758d17016aa491c5b565463ae50a8055048c8408607543eb7f1efe306482332f13a8794bcf85b6055cf3b453b520f12e8f4266d9938f969f2e9a4ba095f52b005989e75ca8d202533549d8e8bc4e64", 0x1, 0x1}, {0x2, 0xc9, &(0x7f00000002c0)="cc9a2c99efbf6be892a367bc5d2672c5dc1d00e0ebc6ad871a5b46b9465a1dc7d9268e18663e6512981d9d367b87b4d95006fd8b73e336d512440da11d8ebb3c06a0c6fd13ead771d522a2908aba121378e2bd4d01798f3b5a4da73122dfdb1799bf94ccd8016247c41d7eb7e63a48c0d968301c9d193ca8932ed01e76e252eb8a50dfe6a7002480d465678cd270a04116128004efd9ca92996dbcaae6151b9f8f5ec458e9e2e45b372427a214340e28acca98d6101f64877be5e0b5db1f1975f0dc44ffc4fe2c63d9", 0x1}, {0xf23b, 0x20, &(0x7f0000000180)="c02540f675a44227e9ecf4b070b551a90139e14a9d8f072b0981adeaa56fed27", 0x0, 0x1}, {0xb4f, 0xd7, &(0x7f0000000440)="ae44dc901b10a957c5d357e5277fa53254ac969caf00cd77e2cd53ce4eb043cf1a59043c2f0fd177d70e7f0d5fbbfe82e55e90fa367d4ceeed843e343257cd6a159ae1e2cbdee025036bc8f8160119300acc01ee06f423c5131c86398aa6704b8ab30fe86c39105bb12d0a552bc571afb9f57cca14d531d5e8260732137e4bb29268fe3af782decedb1de0c0ff69b90d1ce693d167fb59575482f7dfa05973ade0ef347ed8f507c37c0111f9fae0ecfe06b534923a8942ab90b9d4f57cfb77042182b877846e4130f9cd7aa1157e6e1e1d3ede7610dd13", 0x1}, {0x2, 0x70, &(0x7f0000000540)="88053420be5c2cae8dd1b2b543131c1f2c73253eaf5bd533628f350e71c6878530dbc7a92b6c6e56ac055ae173f039955c79dd7cd9b3d8dbd35b5246da25de15d96107786c82699951d8c4465a5ec6166b794ad962b45738a4bad14a4b8ce46a6f39266221333bd9803e33e2340d7bbb", 0x1}, {0x1, 0xcf, &(0x7f00000005c0)="f2bad04c2e78ccf3d1008d1364da9e00d277766d4a4ba88ca74d25880afb7a5587b968aafb6b15d3300c06ef9808c5370a6cb640b04082518a24cb2194c8511e6975e893aed09f11c3394ec57aaec94ab0f6690b401f8fb0e11a35bedf1e65aed7a37e5323e8a413f2ddcaefacd3985e2b6e66b0ce33e12de7ef0e5f33515e7b00b7dd3209dbe130338afe29eea3b746a1536c606b44e5fe41e39cfa5f80dbe92c3f90fba1248f10b0527b0526eab5c64b835c3fa1cc4b8027d8bdf834f7979aa92b05c07f82f6d499001452c7ea1d"}]}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e581778e579c27fff494fdc0162310faaee4d008210000000000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000003c0)={0x7, &(0x7f00000006c0)=[{0x7f, 0x3d, &(0x7f0000000100)="fe3e28abd7f84eada44482afcbc2910e46bac87facbcf0aba51537ceea5f9ee5ae2d3caf1513b0a7a3f727dbf860ec9a022d3bab4652bb547b55677bb8", 0x1, 0x1}, {0x1, 0x99, &(0x7f0000000200)="1db5c1d6b94ae9d1a60ce56ff06c9a70554c7a961bc22902694386a729416cfba116c7f25e5a649b2dea9cfbba6930dbc4dde34657c2c93a03fc79132e601b482b0dec765ce4cf79d4f9758d17016aa491c5b565463ae50a8055048c8408607543eb7f1efe306482332f13a8794bcf85b6055cf3b453b520f12e8f4266d9938f969f2e9a4ba095f52b005989e75ca8d202533549d8e8bc4e64", 0x1, 0x1}, {0x2, 0xc9, &(0x7f00000002c0)="cc9a2c99efbf6be892a367bc5d2672c5dc1d00e0ebc6ad871a5b46b9465a1dc7d9268e18663e6512981d9d367b87b4d95006fd8b73e336d512440da11d8ebb3c06a0c6fd13ead771d522a2908aba121378e2bd4d01798f3b5a4da73122dfdb1799bf94ccd8016247c41d7eb7e63a48c0d968301c9d193ca8932ed01e76e252eb8a50dfe6a7002480d465678cd270a04116128004efd9ca92996dbcaae6151b9f8f5ec458e9e2e45b372427a214340e28acca98d6101f64877be5e0b5db1f1975f0dc44ffc4fe2c63d9", 0x1}, {0xf23b, 0x20, &(0x7f0000000180)="c02540f675a44227e9ecf4b070b551a90139e14a9d8f072b0981adeaa56fed27", 0x0, 0x1}, {0xb4f, 0xd7, &(0x7f0000000440)="ae44dc901b10a957c5d357e5277fa53254ac969caf00cd77e2cd53ce4eb043cf1a59043c2f0fd177d70e7f0d5fbbfe82e55e90fa367d4ceeed843e343257cd6a159ae1e2cbdee025036bc8f8160119300acc01ee06f423c5131c86398aa6704b8ab30fe86c39105bb12d0a552bc571afb9f57cca14d531d5e8260732137e4bb29268fe3af782decedb1de0c0ff69b90d1ce693d167fb59575482f7dfa05973ade0ef347ed8f507c37c0111f9fae0ecfe06b534923a8942ab90b9d4f57cfb77042182b877846e4130f9cd7aa1157e6e1e1d3ede7610dd13", 0x1}, {0x2, 0x70, &(0x7f0000000540)="88053420be5c2cae8dd1b2b543131c1f2c73253eaf5bd533628f350e71c6878530dbc7a92b6c6e56ac055ae173f039955c79dd7cd9b3d8dbd35b5246da25de15d96107786c82699951d8c4465a5ec6166b794ad962b45738a4bad14a4b8ce46a6f39266221333bd9803e33e2340d7bbb", 0x1}, {0x1, 0xcf, &(0x7f00000005c0)="f2bad04c2e78ccf3d1008d1364da9e00d277766d4a4ba88ca74d25880afb7a5587b968aafb6b15d3300c06ef9808c5370a6cb640b04082518a24cb2194c8511e6975e893aed09f11c3394ec57aaec94ab0f6690b401f8fb0e11a35bedf1e65aed7a37e5323e8a413f2ddcaefacd3985e2b6e66b0ce33e12de7ef0e5f33515e7b00b7dd3209dbe130338afe29eea3b746a1536c606b44e5fe41e39cfa5f80dbe92c3f90fba1248f10b0527b0526eab5c64b835c3fa1cc4b8027d8bdf834f7979aa92b05c07f82f6d499001452c7ea1d"}]}) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 00:49:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60daaee4d0000000000000189ea517ffa897cac0f78"], 0x208e24b) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x10000, 0x94c00) getsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180), &(0x7f00000002c0)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0xfffffffd}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:12 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)) 00:49:12 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xbb57030001000000}]) 00:49:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60d25"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x8, 0x7, 0x6, {{0x10, 0x4, 0x2, 0x31, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@ssrr={0x89, 0x2b, 0x2f, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @broadcast, @remote, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@delqdisc={0x12c, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xfff2}, {0xe, 0x6}, {0x4, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbbe}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x34, 0x7f, 0x8867, 0xfffffffc, 0x0, 0x1a, 0x700, 0x9}}, {0x16, 0x2, [0x101, 0x4577, 0xfdd5, 0x8, 0x800, 0x2, 0x100, 0x1, 0x0]}}, {{0x1c, 0x1, {0xed, 0x4, 0xffff, 0xffffffff, 0x0, 0x9, 0x9, 0x9}}, {0x16, 0x2, [0xdb, 0x6, 0x1, 0x3, 0xff, 0x24e, 0x40, 0x7884, 0x2]}}, {{0x1c, 0x1, {0x9, 0x14, 0x3, 0x5, 0x2, 0x10000, 0x4, 0x2}}, {0x8, 0x2, [0x7c0, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xee}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c821ee2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x83, 0x3, 0x100, 0x2, 0x3, 0x80000000, 0xa}}, {0x18, 0x2, [0x6, 0xa3aa, 0x200, 0x5, 0x400, 0x9, 0x1, 0x9, 0x81, 0x3ff]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000100)={0x6, 0x7ff, 0x8000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) 00:49:12 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xf4ffffff00000000}]) 00:49:13 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:49:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f788b8399029c699d9ea0fcc67d36a01be717a109aed14a4f85ec57aa638a293383180432f7a175a6ece82f9d6ca19b22a1d17ad4a4186aba2e982283cf46422e880519e85a45810ec402d4621a025b0ba89715964a552190d42b3ba9323ae0ad8ba55b56fc225fa57032eee6ca1a3cfa4984918e334be6f50cf5f392a95ad5580b602ae97b3aa4e16bed5e6c7bad4e65cf6e71643fc5b942e1caef46f5fcd7ab0774ad499b73e605cf00000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) 00:49:13 executing program 1: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) 00:49:13 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xf8ff3f1f00000000}]) 00:49:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60d25"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x8, 0x7, 0x6, {{0x10, 0x4, 0x2, 0x31, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@ssrr={0x89, 0x2b, 0x2f, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @broadcast, @remote, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@delqdisc={0x12c, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xfff2}, {0xe, 0x6}, {0x4, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbbe}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x34, 0x7f, 0x8867, 0xfffffffc, 0x0, 0x1a, 0x700, 0x9}}, {0x16, 0x2, [0x101, 0x4577, 0xfdd5, 0x8, 0x800, 0x2, 0x100, 0x1, 0x0]}}, {{0x1c, 0x1, {0xed, 0x4, 0xffff, 0xffffffff, 0x0, 0x9, 0x9, 0x9}}, {0x16, 0x2, [0xdb, 0x6, 0x1, 0x3, 0xff, 0x24e, 0x40, 0x7884, 0x2]}}, {{0x1c, 0x1, {0x9, 0x14, 0x3, 0x5, 0x2, 0x10000, 0x4, 0x2}}, {0x8, 0x2, [0x7c0, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xee}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c821ee2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x83, 0x3, 0x100, 0x2, 0x3, 0x80000000, 0xa}}, {0x18, 0x2, [0x6, 0xa3aa, 0x200, 0x5, 0x400, 0x9, 0x1, 0x9, 0x81, 0x3ff]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000100)={0x6, 0x7ff, 0x8000, 0x4}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:13 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:49:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) 00:49:14 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xfbffffff00000000}]) 00:49:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 00:49:14 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f788b8399029c699d9ea0fcc67d36a01be717a109aed14a4f85ec57aa638a293383180432f7a175a6ece82f9d6ca19b22a1d17ad4a4186aba2e982283cf46422e880519e85a45810ec402d4621a025b0ba89715964a552190d42b3ba9323ae0ad8ba55b56fc225fa57032eee6ca1a3cfa4984918e334be6f50cf5f392a95ad5580b602ae97b3aa4e16bed5e6c7bad4e65cf6e71643fc5b942e1caef46f5fcd7ab0774ad499b73e605cf00000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) 00:49:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60d25"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x8, 0x7, 0x6, {{0x10, 0x4, 0x2, 0x31, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@ssrr={0x89, 0x2b, 0x2f, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @broadcast, @remote, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@delqdisc={0x12c, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xfff2}, {0xe, 0x6}, {0x4, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbbe}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x34, 0x7f, 0x8867, 0xfffffffc, 0x0, 0x1a, 0x700, 0x9}}, {0x16, 0x2, [0x101, 0x4577, 0xfdd5, 0x8, 0x800, 0x2, 0x100, 0x1, 0x0]}}, {{0x1c, 0x1, {0xed, 0x4, 0xffff, 0xffffffff, 0x0, 0x9, 0x9, 0x9}}, {0x16, 0x2, [0xdb, 0x6, 0x1, 0x3, 0xff, 0x24e, 0x40, 0x7884, 0x2]}}, {{0x1c, 0x1, {0x9, 0x14, 0x3, 0x5, 0x2, 0x10000, 0x4, 0x2}}, {0x8, 0x2, [0x7c0, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xee}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c821ee2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x83, 0x3, 0x100, 0x2, 0x3, 0x80000000, 0xa}}, {0x18, 0x2, [0x6, 0xa3aa, 0x200, 0x5, 0x400, 0x9, 0x1, 0x9, 0x81, 0x3ff]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000100)={0x6, 0x7ff, 0x8000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60d25"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x8, 0x7, 0x6, {{0x10, 0x4, 0x2, 0x31, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@ssrr={0x89, 0x2b, 0x2f, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @broadcast, @remote, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@delqdisc={0x12c, 0x25, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xfff2}, {0xe, 0x6}, {0x4, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbbe}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x34, 0x7f, 0x8867, 0xfffffffc, 0x0, 0x1a, 0x700, 0x9}}, {0x16, 0x2, [0x101, 0x4577, 0xfdd5, 0x8, 0x800, 0x2, 0x100, 0x1, 0x0]}}, {{0x1c, 0x1, {0xed, 0x4, 0xffff, 0xffffffff, 0x0, 0x9, 0x9, 0x9}}, {0x16, 0x2, [0xdb, 0x6, 0x1, 0x3, 0xff, 0x24e, 0x40, 0x7884, 0x2]}}, {{0x1c, 0x1, {0x9, 0x14, 0x3, 0x5, 0x2, 0x10000, 0x4, 0x2}}, {0x8, 0x2, [0x7c0, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xee}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c821ee2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x83, 0x3, 0x100, 0x2, 0x3, 0x80000000, 0xa}}, {0x18, 0x2, [0x6, 0xa3aa, 0x200, 0x5, 0x400, 0x9, 0x1, 0x9, 0x81, 0x3ff]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000100)={0x6, 0x7ff, 0x8000, 0x4}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 00:49:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:14 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0xbc, &(0x7f0000000340)=""/188, 0x0, 0x5c}, 0x90) 00:49:15 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffefffff00000000}]) 00:49:15 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f788b8399029c699d9ea0fcc67d36a01be717a109aed14a4f85ec57aa638a293383180432f7a175a6ece82f9d6ca19b22a1d17ad4a4186aba2e982283cf46422e880519e85a45810ec402d4621a025b0ba89715964a552190d42b3ba9323ae0ad8ba55b56fc225fa57032eee6ca1a3cfa4984918e334be6f50cf5f392a95ad5580b602ae97b3aa4e16bed5e6c7bad4e65cf6e71643fc5b942e1caef46f5fcd7ab0774ad499b73e605cf00000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) (async) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) 00:49:15 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000180)={"231e51a7ac54ad284f2382468e7025fc88a6da7edf529b80e166a702c586"}) 00:49:15 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffffe70300000000}]) 00:49:15 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:49:15 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="b84b088ec8660f38302aba4100ec66b8010000000f23d80f21f86635800000900f23f83ef30fc73712c50f01cbf30f1bdb0f01c5819d00001287", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:16 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000003c0)) 00:49:16 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffffffff00000000}]) 00:49:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:16 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0xa, &(0x7f00000009c0)=@framed={{}, [@btf_id, @tail_call]}, &(0x7f0000000b40)='GPL\x00'}, 0x90) 00:49:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r4}}) 00:49:16 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffffffffff600000}]) 00:49:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYRES32, @ANYBLOB="1400020064766d7270"], 0x140}}, 0x0) 00:49:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="b84b088ec8660f38302aba4100ec66b8010000000f23d80f21f86635800000900f23f83ef30fc73712c50f01cbf30f1bdb0f01c5819d00001287", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 00:49:17 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0xffffffffffffff7f}]) 00:49:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:18 executing program 1: add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 00:49:18 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2}]) 00:49:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r4}}) 00:49:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="b84b088ec8660f38302aba4100ec66b8010000000f23d80f21f86635800000900f23f83ef30fc73712c50f01cbf30f1bdb0f01c5819d00001287", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="b84b088ec8660f38302aba4100ec66b8010000000f23d80f21f86635800000900f23f83ef30fc73712c50f01cbf30f1bdb0f01c5819d00001287", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:49:18 executing program 1: socket(0x1e, 0x0, 0x8001) 00:49:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:18 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3}]) 00:49:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r4}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r4}}) (async) 00:49:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:19 executing program 1: syz_io_uring_setup(0x19ae, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000)) 00:49:19 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:19 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x4}]) 00:49:19 executing program 1: sendto$phonet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000140)={0x23, 0x4, 0xfa, 0x2}, 0x10) r0 = memfd_secret(0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x21, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x0, 0xb}, @ringbuf_output, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000b40)='GPL\x00', 0x3f, 0xa8, &(0x7f0000000b80)=""/168, 0x40f00, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x1, 0x7, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) 00:49:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:20 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x5}]) 00:49:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000180), &(0x7f0000000200)={'U+', 0x2}, 0x16, 0x0) 00:49:20 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000002a80), 0x10) 00:49:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/28, 0x1c, 0xffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x5, &(0x7f0000000100)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0xca, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x2, 0x8}, {0x2, 0x4, 0x5, 0x9}, {0x4, 0x2, 0x5, 0xa}, {0x5, 0x1, 0xe, 0x9}, {0x4, 0x5, 0x9}, {0x0, 0x3, 0xf, 0x9}], 0x10, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, r4}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000001500)={0xa8, 0x0, 0x2}) 00:49:20 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:20 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x6}]) 00:49:21 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:49:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000180), &(0x7f0000000200)={'U+', 0x2}, 0x16, 0x0) 00:49:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:21 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 00:49:21 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x7}]) 00:49:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:22 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) 00:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/28, 0x1c, 0xffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x5, &(0x7f0000000100)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0xca, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x2, 0x8}, {0x2, 0x4, 0x5, 0x9}, {0x4, 0x2, 0x5, 0xa}, {0x5, 0x1, 0xe, 0x9}, {0x4, 0x5, 0x9}, {0x0, 0x3, 0xf, 0x9}], 0x10, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, r4}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000001500)={0xa8, 0x0, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pread64(r0, &(0x7f00000003c0)=""/28, 0x1c, 0xffffffff) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x5, &(0x7f0000000100)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0xca, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x2, 0x8}, {0x2, 0x4, 0x5, 0x9}, {0x4, 0x2, 0x5, 0xa}, {0x5, 0x1, 0xe, 0x9}, {0x4, 0x5, 0x9}, {0x0, 0x3, 0xf, 0x9}], 0x10, 0x2}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, r4}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000001500)={0xa8, 0x0, 0x2}) (async) 00:49:22 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]) 00:49:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000180), &(0x7f0000000200)={'U+', 0x2}, 0x16, 0x0) 00:49:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 00:49:22 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x9}]) [ 3413.871879][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 3413.878702][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 00:49:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) close_range(r1, r2, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000200)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x25}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:49:23 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000280)={0x0, [0x6b9, 0x76e3, 0x80000001], [{0xfffffff7}], 0x3}) 00:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:23 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x10}]) 00:49:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/28, 0x1c, 0xffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x5, &(0x7f0000000100)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0xca, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x3, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x2, 0x8}, {0x2, 0x4, 0x5, 0x9}, {0x4, 0x2, 0x5, 0xa}, {0x5, 0x1, 0xe, 0x9}, {0x4, 0x5, 0x9}, {0x0, 0x3, 0xf, 0x9}], 0x10, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, r4}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000001500)={0xa8, 0x0, 0x2}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000001500)={0xa8, 0x0, 0x2}) 00:49:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, 0x0) 00:49:24 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x18}]) 00:49:24 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x450202, 0x0) 00:49:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:24 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x22}]) 00:49:24 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x80080, 0x0) 00:49:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) close_range(r1, r2, 0x2) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000200)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x25}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000dbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:25 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 00:49:25 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2e}]) 00:49:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:25 executing program 1: socketpair(0x2d, 0x0, 0x0, &(0x7f0000000900)) 00:49:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) close_range(r1, r2, 0x2) (async) close_range(r1, r2, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000200)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x25}) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:49:26 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x30}]) 00:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000dbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x82241) ioctl$USBDEVFS_IOCTL(r0, 0x802c550a, &(0x7f0000000000)) 00:49:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:26 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x204}]) 00:49:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:27 executing program 1: socketpair(0x1, 0x0, 0x6, &(0x7f00000001c0)) 00:49:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec29c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:27 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x300}]) 00:49:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x82241) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000000)) 00:49:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000000000000dbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3418.881719][T19396] usb usb1: usbfs: process 19396 (syz-executor.1) did not claim interface 0 before use 00:49:28 executing program 1: syz_open_dev$loop(&(0x7f0000000840), 0x0, 0x10100) 00:49:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:28 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x402}]) 00:49:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 00:49:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:49:29 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x406}]) 00:49:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000ad6000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="0f01c9c4e37d7df100240066b801010f00d0660f3821403d0f35c744240002000000c744240249d133dbc7442406000000000f011c2466b875000f00d0b805000000b9d569e0240f01d9c4e3f916f5cd", 0x50}], 0x1, 0x20, &(0x7f0000000340), 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x4400, 0x174) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3410f38f67d0066bad104b000ee66ba200066ed0f01cfc744240026010000c7442402fa9e0000ff2c24c4012565e7d99a080d3194c744240082120000c7442402a0000000c7442406000000000f011c24f2420f07b9730b0000b801000000ba000000000f30", 0x66}], 0x1, 0x10, &(0x7f0000000280), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:29 executing program 1: socketpair(0x25, 0x0, 0x0, &(0x7f0000000280)) 00:49:29 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x500}]) 00:49:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) 00:49:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946000000000000ff3fdd475202c1e0f60f7872eb69670e3a6a9e28a7972daf"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000440)={0x0, 0x1, 0x1, [0x6692, 0x6, 0x7b4d, 0x3, 0x7fffffff], [0x100000001, 0x0, 0x5, 0x0, 0x719d, 0x7, 0x7fffffff, 0x1, 0x3, 0x9, 0x5, 0x0, 0x4a27, 0x80, 0x3, 0x1, 0x9, 0xe44d, 0x6, 0x41710698, 0x1, 0x8000, 0x3, 0x8000000000000000, 0x354, 0x2, 0x6, 0x1, 0xffff, 0x4e, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000, 0x8, 0x7, 0x8, 0x2, 0x808, 0x80, 0x7, 0x3d, 0x6, 0x4, 0xffffffffffffffff, 0x7fffffff, 0x5, 0xc06d, 0x7, 0x2, 0x9, 0x3ff, 0xffffffffffffa699, 0x7, 0x8000000000000001, 0x8, 0x100000000000, 0xff, 0x8000000000000001, 0x200, 0x3, 0x9, 0x1000, 0x9, 0x7ff, 0x517, 0x3d5, 0x8, 0x7, 0x3, 0x800, 0xffffffff, 0x8000000000000001, 0x6, 0x6, 0x5, 0x6, 0x5, 0x3746a0d, 0x79923c0, 0x1, 0x1, 0x5, 0x0, 0x8000, 0xbe, 0xcc, 0x8, 0x4, 0x0, 0x8, 0x6, 0x1, 0x100, 0x5, 0xffffffffffffffff, 0x2, 0xbcfb, 0x1, 0xfffffffffffffd0c, 0x4, 0x3, 0x7f, 0x8000000000000001, 0x2, 0x80000000, 0xffffffff, 0x0, 0x7, 0x3, 0x10000, 0x2, 0x2, 0x22, 0x3ff, 0xfffffffffffffffc, 0x100000001, 0x8000000000000001, 0x10001, 0xf59d]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r0}, {@val={r4}, @actul_num={@val=0x2b, 0x1, 0x45}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:30 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x600}]) 00:49:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:49:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000ad6000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="0f01c9c4e37d7df100240066b801010f00d0660f3821403d0f35c744240002000000c744240249d133dbc7442406000000000f011c2466b875000f00d0b805000000b9d569e0240f01d9c4e3f916f5cd", 0x50}], 0x1, 0x20, &(0x7f0000000340), 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x4400, 0x174) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3410f38f67d0066bad104b000ee66ba200066ed0f01cfc744240026010000c7442402fa9e0000ff2c24c4012565e7d99a080d3194c744240082120000c7442402a0000000c7442406000000000f011c24f2420f07b9730b0000b801000000ba000000000f30", 0x66}], 0x1, 0x10, &(0x7f0000000280), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:31 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x604}]) 00:49:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 00:49:31 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x700}]) 00:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000ad6000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="0f01c9c4e37d7df100240066b801010f00d0660f3821403d0f35c744240002000000c744240249d133dbc7442406000000000f011c2466b875000f00d0b805000000b9d569e0240f01d9c4e3f916f5cd", 0x50}], 0x1, 0x20, &(0x7f0000000340), 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x4400, 0x174) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3410f38f67d0066bad104b000ee66ba200066ed0f01cfc744240026010000c7442402fa9e0000ff2c24c4012565e7d99a080d3194c744240082120000c7442402a0000000c7442406000000000f011c24f2420f07b9730b0000b801000000ba000000000f30", 0x66}], 0x1, 0x10, &(0x7f0000000280), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946000000000000ff3fdd475202c1e0f60f7872eb69670e3a6a9e28a7972daf"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946000000000000ff3fdd475202c1e0f60f7872eb69670e3a6a9e28a7972daf"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000440)={0x0, 0x1, 0x1, [0x6692, 0x6, 0x7b4d, 0x3, 0x7fffffff], [0x100000001, 0x0, 0x5, 0x0, 0x719d, 0x7, 0x7fffffff, 0x1, 0x3, 0x9, 0x5, 0x0, 0x4a27, 0x80, 0x3, 0x1, 0x9, 0xe44d, 0x6, 0x41710698, 0x1, 0x8000, 0x3, 0x8000000000000000, 0x354, 0x2, 0x6, 0x1, 0xffff, 0x4e, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000, 0x8, 0x7, 0x8, 0x2, 0x808, 0x80, 0x7, 0x3d, 0x6, 0x4, 0xffffffffffffffff, 0x7fffffff, 0x5, 0xc06d, 0x7, 0x2, 0x9, 0x3ff, 0xffffffffffffa699, 0x7, 0x8000000000000001, 0x8, 0x100000000000, 0xff, 0x8000000000000001, 0x200, 0x3, 0x9, 0x1000, 0x9, 0x7ff, 0x517, 0x3d5, 0x8, 0x7, 0x3, 0x800, 0xffffffff, 0x8000000000000001, 0x6, 0x6, 0x5, 0x6, 0x5, 0x3746a0d, 0x79923c0, 0x1, 0x1, 0x5, 0x0, 0x8000, 0xbe, 0xcc, 0x8, 0x4, 0x0, 0x8, 0x6, 0x1, 0x100, 0x5, 0xffffffffffffffff, 0x2, 0xbcfb, 0x1, 0xfffffffffffffd0c, 0x4, 0x3, 0x7f, 0x8000000000000001, 0x2, 0x80000000, 0xffffffff, 0x0, 0x7, 0x3, 0x10000, 0x2, 0x2, 0x22, 0x3ff, 0xfffffffffffffffc, 0x100000001, 0x8000000000000001, 0x10001, 0xf59d]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r0}, {@val={r4}, @actul_num={@val=0x2b, 0x1, 0x45}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x0) 00:49:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:32 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x810}]) 00:49:32 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 00:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b91929ff0fc3b600f629aaee4d000000000000ff53c1c614a30b3e29d39962fd553fdd475202f9d6406860458b9be0c1e0f6e85471053fe8713202bce27bf3b3396b179798982f3fb5e0597091513c9e00337742c427668b3d1df12dde6f6c763401c1b4fe7d3759c8857dccf8767e4796e5d3311b2687064ff4b26bf7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f000050e000/0x2000)=nil, 0x2000, 0x1000009, 0x20010, r4, 0xbeea5000) 00:49:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000002e00), 0x0, &(0x7f0000002e80)={0x0, "8007f70a9f60a357baad5d639a145388e5e318afcb3fe2ca3b6b704dd83728de2edc14013d79faa94491ae066b2e706bfe833d791a3d685ac8dce21365c40e9b"}, 0x48, 0xfffffffffffffff8) 00:49:32 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x900}]) 00:49:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946000000000000ff3fdd475202c1e0f60f7872eb69670e3a6a9e28a7972daf"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000440)={0x0, 0x1, 0x1, [0x6692, 0x6, 0x7b4d, 0x3, 0x7fffffff], [0x100000001, 0x0, 0x5, 0x0, 0x719d, 0x7, 0x7fffffff, 0x1, 0x3, 0x9, 0x5, 0x0, 0x4a27, 0x80, 0x3, 0x1, 0x9, 0xe44d, 0x6, 0x41710698, 0x1, 0x8000, 0x3, 0x8000000000000000, 0x354, 0x2, 0x6, 0x1, 0xffff, 0x4e, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000, 0x8, 0x7, 0x8, 0x2, 0x808, 0x80, 0x7, 0x3d, 0x6, 0x4, 0xffffffffffffffff, 0x7fffffff, 0x5, 0xc06d, 0x7, 0x2, 0x9, 0x3ff, 0xffffffffffffa699, 0x7, 0x8000000000000001, 0x8, 0x100000000000, 0xff, 0x8000000000000001, 0x200, 0x3, 0x9, 0x1000, 0x9, 0x7ff, 0x517, 0x3d5, 0x8, 0x7, 0x3, 0x800, 0xffffffff, 0x8000000000000001, 0x6, 0x6, 0x5, 0x6, 0x5, 0x3746a0d, 0x79923c0, 0x1, 0x1, 0x5, 0x0, 0x8000, 0xbe, 0xcc, 0x8, 0x4, 0x0, 0x8, 0x6, 0x1, 0x100, 0x5, 0xffffffffffffffff, 0x2, 0xbcfb, 0x1, 0xfffffffffffffd0c, 0x4, 0x3, 0x7f, 0x8000000000000001, 0x2, 0x80000000, 0xffffffff, 0x0, 0x7, 0x3, 0x10000, 0x2, 0x2, 0x22, 0x3ff, 0xfffffffffffffffc, 0x100000001, 0x8000000000000001, 0x10001, 0xf59d]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r0}, {@val={r4}, @actul_num={@val=0x2b, 0x1, 0x45}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) 00:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:33 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xe7d}]) 00:49:33 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300), 0x48) 00:49:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80, 0x400}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x400, 0x0, 0x0, 0x0, 0x0, "8ae4a9ec2f7d767d"}) 00:49:34 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b91929ff0fc3b600f629aaee4d000000000000ff53c1c614a30b3e29d39962fd553fdd475202f9d6406860458b9be0c1e0f6e85471053fe8713202bce27bf3b3396b179798982f3fb5e0597091513c9e00337742c427668b3d1df12dde6f6c763401c1b4fe7d3759c8857dccf8767e4796e5d3311b2687064ff4b26bf7"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b91929ff0fc3b600f629aaee4d000000000000ff53c1c614a30b3e29d39962fd553fdd475202f9d6406860458b9be0c1e0f6e85471053fe8713202bce27bf3b3396b179798982f3fb5e0597091513c9e00337742c427668b3d1df12dde6f6c763401c1b4fe7d3759c8857dccf8767e4796e5d3311b2687064ff4b26bf7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f000050e000/0x2000)=nil, 0x2000, 0x1000009, 0x20010, r4, 0xbeea5000) (async) mmap(&(0x7f000050e000/0x2000)=nil, 0x2000, 0x1000009, 0x20010, r4, 0xbeea5000) 00:49:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:34 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1008}]) 00:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) 00:49:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80, 0x400}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80, 0x400}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:49:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, "2604c12b"}, &(0x7f0000000280)=0x28) 00:49:35 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1800}]) 00:49:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b91929ff0fc3b600f629aaee4d000000000000ff53c1c614a30b3e29d39962fd553fdd475202f9d6406860458b9be0c1e0f6e85471053fe8713202bce27bf3b3396b179798982f3fb5e0597091513c9e00337742c427668b3d1df12dde6f6c763401c1b4fe7d3759c8857dccf8767e4796e5d3311b2687064ff4b26bf7"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f000050e000/0x2000)=nil, 0x2000, 0x1000009, 0x20010, r4, 0xbeea5000) (async) mmap(&(0x7f000050e000/0x2000)=nil, 0x2000, 0x1000009, 0x20010, r4, 0xbeea5000) 00:49:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2}, 0x2, @in6=@empty}}, 0xe8) 00:49:35 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2000}]) 00:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:36 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 00:49:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:36 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2200}]) 00:49:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2}, 0x0, @in6=@empty}}, 0xa8) 00:49:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80, 0x400}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80, 0x400}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:49:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) fsetxattr$security_evm(r3, &(0x7f0000000100), &(0x7f0000000180)=@ng={0x4, 0xe, "9739d8ad1977d7b90fcaeea0"}, 0xe, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:37 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2e00}]) 00:49:37 executing program 1: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 00:49:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:49:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:37 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001300)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_id=0xffffffffffffffff}, 0x20) 00:49:38 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3000}]) 00:49:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) fsetxattr$security_evm(r3, &(0x7f0000000100), &(0x7f0000000180)=@ng={0x4, 0xe, "9739d8ad1977d7b90fcaeea0"}, 0xe, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:38 executing program 1: syz_open_procfs(0x0, &(0x7f0000000640)='net/arp\x00') 00:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:49:38 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3f00}]) 00:49:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) fsetxattr$security_evm(r3, &(0x7f0000000100), &(0x7f0000000180)=@ng={0x4, 0xe, "9739d8ad1977d7b90fcaeea0"}, 0xe, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) fsetxattr$security_evm(r3, &(0x7f0000000100), &(0x7f0000000180)=@ng={0x4, 0xe, "9739d8ad1977d7b90fcaeea0"}, 0xe, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 00:49:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x1, 0x0) 00:49:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:49:39 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) 00:49:39 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x4000}]) 00:49:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:40 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) read$FUSE(r0, &(0x7f0000003100)={0x2020}, 0x2020) 00:49:40 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x401f}]) 00:49:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty}}, 0xe8) 00:49:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r5, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:49:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:41 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x60ff}]) 00:49:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5aa8fe08f3de4e9310ce4f877aa119e47d3096921617fedece01000fb112eb1ad1f26d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaac23, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x15000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:41 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x7d0e}]) 00:49:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r5, 0x3}}, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:49:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:42 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x80000}]) 00:49:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:42 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='net/arp\x00') 00:49:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r5, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r5, 0x3}}, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 00:49:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:43 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x100000}]) 00:49:43 executing program 1: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30}, 0x30) getresuid(&(0x7f00000000c0), &(0x7f0000000100), 0x0) 00:49:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:43 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x200000}]) 00:49:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x61, 0x0, 0x0, 0x0, 0x0, "9f027c4cd76981f3"}) 00:49:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000100)) 00:49:44 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1000000}]) 00:49:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ff"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f64c9b5638941f272510dd000000000000ff3fdd4752155249d0863562200ca3f27eedb2ad23404f159bb0c40c8e1017c18476e8a3b618ab918c90e1d6944779d246d37d60372258a853209d8a320ae7fa1c5869a2003a232eb726e202fed84b32be417feeb96914ad009d7a3ba53bb7c33ea1734dccdeba9e6a55d12967d113c773389d23fe9b7ae90cb5ddd207ffc03f698d563e70b19087f288b52334b73ba38c150d0306a427100daef34974c0346651158e3f7eb0afd27185303110ff402f8588ddb11b80f7f117"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) fcntl$getown(r4, 0x9) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 00:49:45 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2000000}]) 00:49:45 executing program 1: getrlimit(0x0, &(0x7f0000004240)) 00:49:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 00:49:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:45 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2040000}]) 00:49:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ff"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:45 executing program 1: syz_io_uring_setup(0x2e03, &(0x7f0000000080)={0x0, 0x91cc, 0x8}, &(0x7f0000000100), &(0x7f0000000140)) 00:49:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f64c9b5638941f272510dd000000000000ff3fdd4752155249d0863562200ca3f27eedb2ad23404f159bb0c40c8e1017c18476e8a3b618ab918c90e1d6944779d246d37d60372258a853209d8a320ae7fa1c5869a2003a232eb726e202fed84b32be417feeb96914ad009d7a3ba53bb7c33ea1734dccdeba9e6a55d12967d113c773389d23fe9b7ae90cb5ddd207ffc03f698d563e70b19087f288b52334b73ba38c150d0306a427100daef34974c0346651158e3f7eb0afd27185303110ff402f8588ddb11b80f7f117"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) fcntl$getown(r4, 0x9) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:46 executing program 1: bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='S'}, 0x50) 00:49:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xc2d28c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85367f2f39a31cd9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x4}, 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:49:46 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3000000}]) 00:49:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:46 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='personality\x00') 00:49:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ff"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f64c9b5638941f272510dd000000000000ff3fdd4752155249d0863562200ca3f27eedb2ad23404f159bb0c40c8e1017c18476e8a3b618ab918c90e1d6944779d246d37d60372258a853209d8a320ae7fa1c5869a2003a232eb726e202fed84b32be417feeb96914ad009d7a3ba53bb7c33ea1734dccdeba9e6a55d12967d113c773389d23fe9b7ae90cb5ddd207ffc03f698d563e70b19087f288b52334b73ba38c150d0306a427100daef34974c0346651158e3f7eb0afd27185303110ff402f8588ddb11b80f7f117"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$igmp(0x2, 0x3, 0x2) fcntl$getown(r4, 0x9) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:47 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3e7ffff}]) 00:49:47 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001480)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) 00:49:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xc2d28c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85367f2f39a31cd9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x4}, 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xc2d28c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85367f2f39a31cd9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x4}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 00:49:47 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x4000000}]) 00:49:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:47 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x2f, 0x1}, 0x20) 00:49:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92ae"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x208e24b) r3 = syz_io_uring_complete(0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x2, 0x100, 0x5, 0x8, 0x3, 0x9b, 0x3e, 0xd4, 0x7, 0x3, 0x7, 0x4, 0x8000000000000000}, {0x5, 0x3, 0x6f, 0x1f, 0x6, 0x1f, 0x81, 0x7, 0x6, 0x2, 0x3, 0x0, 0x7}, {0x2, 0x6, 0xc0, 0x6c, 0x2, 0x2, 0x2, 0x4f, 0x1, 0x3f, 0x4, 0x6, 0x401}], 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000005c40)={'wg1\x00'}) 00:49:48 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x5000000}]) 00:49:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ec0)={0x19, 0x2, &(0x7f0000002d40)=@raw=[@initr0], 0x0}, 0x90) 00:49:48 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x6000000}]) 00:49:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92ae"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xc2d28c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85367f2f39a31cd9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x4}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:49:49 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) [ 3440.435573][T19876] random: crng reseeded on system resumption 00:49:49 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x6040000}]) 00:49:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x17c, 0x0, 0x1, 0x9d16dc3aeef92770, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0xb4, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffe}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x4}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x886323ce}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xea}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000090) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x208e24b) (async) r3 = syz_io_uring_complete(0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x2, 0x100, 0x5, 0x8, 0x3, 0x9b, 0x3e, 0xd4, 0x7, 0x3, 0x7, 0x4, 0x8000000000000000}, {0x5, 0x3, 0x6f, 0x1f, 0x6, 0x1f, 0x81, 0x7, 0x6, 0x2, 0x3, 0x0, 0x7}, {0x2, 0x6, 0xc0, 0x6c, 0x2, 0x2, 0x2, 0x4f, 0x1, 0x3f, 0x4, 0x6, 0x401}], 0x8}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:50 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x801c581f, 0x0) 00:49:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92ae"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[], 0x78) 00:49:50 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x7000000}]) 00:49:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x208e24b) (async) r3 = syz_io_uring_complete(0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x2, 0x100, 0x5, 0x8, 0x3, 0x9b, 0x3e, 0xd4, 0x7, 0x3, 0x7, 0x4, 0x8000000000000000}, {0x5, 0x3, 0x6f, 0x1f, 0x6, 0x1f, 0x81, 0x7, 0x6, 0x2, 0x3, 0x0, 0x7}, {0x2, 0x6, 0xc0, 0x6c, 0x2, 0x2, 0x2, 0x4f, 0x1, 0x3f, 0x4, 0x6, 0x401}], 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:51 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f0000000300)) 00:49:51 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x8000000}]) 00:49:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:51 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000100)="0dd0df592462058aaab6b916", 0xc) 00:49:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x17c, 0x0, 0x1, 0x9d16dc3aeef92770, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0xb4, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffe}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x4}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x886323ce}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xea}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000090) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x1000007, 0x2010, r3, 0xd01f4000) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x100000001) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xfffffffd, 0x2}, 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:49:52 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x8100000}]) 00:49:52 executing program 1: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 00:49:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x17c, 0x0, 0x1, 0x9d16dc3aeef92770, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0xb4, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffe}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x4}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x886323ce}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xea}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000090) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:52 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x9000000}]) 00:49:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92ae"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x3, 0x9b}, 0xc) 00:49:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x1000007, 0x2010, r3, 0xd01f4000) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x100000001) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xfffffffd, 0x2}, 0x10}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x1000007, 0x2010, r3, 0xd01f4000) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) (async) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) (async) accept4$alg(r2, 0x0, 0x0, 0x0) (async) sendfile(r4, r0, 0x0, 0x100000001) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xfffffffd, 0x2}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 00:49:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ec0)={0x1c, 0x2, &(0x7f0000002d40)=@raw=[@initr0], &(0x7f0000002dc0)='syzkaller\x00'}, 0x90) 00:49:53 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x10000000}]) 00:49:53 executing program 5: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005480)={0x14}, 0x14}}, 0x0) 00:49:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92ae"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:54 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x18000000}]) 00:49:54 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000005600), 0x0, 0x0) 00:49:54 executing program 5: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f7866ec4f1b209d5137ef88539225ab226908c1fc3c18e3ef451a75b4f3c3e7d2edd16b48699ddc35a7d5499e093c931076f36cf675db478e8fed55fd0000000000000000b2c28d093e9364469e7e88654d6fdf8245de773e537fad2bfac6c1295be6e7feb45a2c1b891fa05feda596a19dadf5be917e068103dae02c915ce4526716dbdc5bb970e3fab80aa307aac2f467d12ea26d1e5f5a88369099ed01cbf0477a348e87f1a11807529915703556674e9b04c6ebd5f0f27e6904abde0d65dd556ca64bc02de3a837d8effebc237af1c681111c956690a005edefa2e616febb0bc7faf5f6ae20fe88eacc012a4b0e311a361dc7235fc085cf52c4df326a32c7641e01e7a550769093bc9e0576a6db82bd6490dcdc79a21b5451dcb2f902a9565c46fdbda2a3be7787a5d27c001110ffce410669c6733ef9c9ade87ecf509cbd7c90b16205ca03da76561d1154c9a2d0a49aa074c7d0db8f25727abaf76d0136884e6d275ddfd41d97c983d3215a535952eed9f5e0d8d83aa1b7293b2e8c000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x1000007, 0x2010, r3, 0xd01f4000) (async) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) (async) accept4$alg(r2, 0x0, 0x0, 0x0) (async) sendfile(r4, r0, 0x0, 0x100000001) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xfffffffd, 0x2}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:49:54 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1f3ffff8}]) 00:49:55 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) 00:49:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92ae"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:55 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1f400000}]) 00:49:55 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:49:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4dcbffffff0000ffa26908ed3fdd475202c1"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ecf402f0d33109000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:56 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x22000000}]) 00:49:56 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r0, 0x1, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 00:49:56 executing program 5: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:49:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:56 executing program 1: socket(0x0, 0x100805, 0x0) 00:49:56 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2e000000}]) 00:49:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:57 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 00:49:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:57 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x30000000}]) 00:49:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4dcbffffff0000ffa26908ed3fdd475202c1"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4dcbffffff0000ffa26908ed3fdd475202c1"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:57 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) 00:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000780)={&(0x7f0000000440), 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:49:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:58 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3f000000}]) 00:49:58 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 00:49:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:58 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x40000000}]) 00:49:59 executing program 1: bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000280)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:49:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4dcbffffff0000ffa26908ed3fdd475202c1"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4dcbffffff0000ffa26908ed3fdd475202c1"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:59 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "74cec5f2"}}) 00:49:59 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:49:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:59 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x7d0e0000}]) 00:49:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @mss, @timestamp, @mss], 0x4) 00:50:00 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xf4ffffff}]) 00:50:00 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) 00:50:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faafe4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$FIONCLEX(r2, 0x5450) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x101}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:00 executing program 1: migrate_pages(0x0, 0x6, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x80000001) 00:50:00 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xf8ff3f1f}]) 00:50:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbbfe9cbb600f60faaee4d000000000000ff3fdd475202c1e0f6"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 00:50:01 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xfbffffff}]) 00:50:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faafe4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faafe4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$FIONCLEX(r2, 0x5450) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x101}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x101}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:01 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:50:02 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xff600000}]) 00:50:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:50:02 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000000)) 00:50:02 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffefffff}]) 00:50:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbbfe9cbb600f60faaee4d000000000000ff3fdd475202c1e0f6"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "14cbce3e"}}) 00:50:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faafe4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faafe4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$FIONCLEX(r2, 0x5450) (async) ioctl$FIONCLEX(r2, 0x5450) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x101}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:50:03 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffffe703}]) 00:50:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbbfe9cbb600f60faaee4d000000000000ff3fdd475202c1e0f6"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:03 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f00000000c0)=@id, 0x10) 00:50:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:50:04 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffffefff}]) 00:50:04 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x1c00) 00:50:04 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f0000000440)="0a0d0b25461af4f76882107ff51852ea1731d4366adba0343b3d5d0d23cb5cf77475f47f0ab4c6daea27f70bbc7941aaecd2347602904be5465ea904a77a454ee674974d801782a95c782d044998690297f9867d9556d44da85488b6ba163012a7e250897687b9df9189a335020590c1d08f78b7469814fb6f37a8776a19e817b0389f5d38c56be55f4cb43de555c847896ba5bb5094337aa23515ee9f79d1f5aff544205f417b8eb6be07474ca69edbc508571b3a7d11435808bb59918603bf9d1aa926c0313f77e0703150a0a1665f60afd5e2fb784ea86c06c7f8f615f7cb6d", 0xe1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaae4d000000000000ff3fdd7a6002c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000589000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="0f75cc9af6ff2701baf80c66b8e1bae08c66efbafc0cec2e0f934900360f01c866b80093ba950f23c00f21f86635000000000f23f80fc71c3e3e3636dcf6b828000f00d0baf80c66b8505e268b66efbafc0c66b8edaefc6a66ef", 0x5a}], 0x1, 0x20, &(0x7f00000003c0)=[@cstype0={0x4, 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x762}}, './file0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x40400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa0b0}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)="157c7781aab105736a02a2ad9c038fdc94acbbca4964a603993c53cc9890e8553f7a40e2d2864e87a035f1ebe2a393df46381ada5ed1aa19bc66f3726a5414b8fb468b6577233f0a21b5a7717e54a9073b715b57ff51cfb9ff16b8bb1f03e51709410af9458efe3f8ac99ed149f6c4e9542cd02a0b818f4f4cc367ce4c8ee746bf16e9c54805fb7330787deac0e270bf399a70fc9bf9e761fb924b827a5434dba96f2d6997ebb3c3d50f2018d817ae08f73cf2a0c62ba0", 0xb7, 0x6) 00:50:04 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac"], 0x40}}, 0x0) 00:50:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="9e326946b9c01147ecae9c7ba7026579e42ede75c1d4ea543c8b1497b33c1ff85d1ebb5172a84fed98eb3755f616aeaa28fb6471ef137e5268abd1a527602496157a1408703a69cbcca82b908873ae1cdcc5be07582ec4bd9d79de07e0d4c661bdaf8be58d53f3515b05d686fa3454762875d6ef5dd231455adab21c"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) open_by_handle_at(r3, &(0x7f0000000100)=@orangefs_parent={0x28, 0x2, {{"dc0148fccd390f892fa5d8d4aa2f4791", 0xffffff74}, {"fba53127c43f97ffdfb60bc32686a0b6", 0x7}}}, 0x105440) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x92, 0x101, 0x22, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x7, 0x100}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x40, 0x90, 0xa8, 0x3, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x64, 0x0, 0x6, 0x38, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, {[@rr={0x7, 0x1f, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102, @private=0xa010100, @loopback, @broadcast, @multicast2]}, @noop]}}}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000780)={0x9, r8, 0x2}) sendmsg$nl_route(r11, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@RTM_NEWMDB={0xf8, 0x54, 0x800, 0x70bd28, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x5, 0x1, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x1, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x3, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x2, {@ip4=@remote, 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r12, 0xae80, 0x0) 00:50:04 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff4}]) 00:50:05 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x0) 00:50:05 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffb}]) 00:50:05 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f0000000440)="0a0d0b25461af4f76882107ff51852ea1731d4366adba0343b3d5d0d23cb5cf77475f47f0ab4c6daea27f70bbc7941aaecd2347602904be5465ea904a77a454ee674974d801782a95c782d044998690297f9867d9556d44da85488b6ba163012a7e250897687b9df9189a335020590c1d08f78b7469814fb6f37a8776a19e817b0389f5d38c56be55f4cb43de555c847896ba5bb5094337aa23515ee9f79d1f5aff544205f417b8eb6be07474ca69edbc508571b3a7d11435808bb59918603bf9d1aa926c0313f77e0703150a0a1665f60afd5e2fb784ea86c06c7f8f615f7cb6d", 0xe1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaae4d000000000000ff3fdd7a6002c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000589000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="0f75cc9af6ff2701baf80c66b8e1bae08c66efbafc0cec2e0f934900360f01c866b80093ba950f23c00f21f86635000000000f23f80fc71c3e3e3636dcf6b828000f00d0baf80c66b8505e268b66efbafc0c66b8edaefc6a66ef", 0x5a}], 0x1, 0x20, &(0x7f00000003c0)=[@cstype0={0x4, 0x1}], 0x1) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x762}}, './file0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x40400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa0b0}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)="157c7781aab105736a02a2ad9c038fdc94acbbca4964a603993c53cc9890e8553f7a40e2d2864e87a035f1ebe2a393df46381ada5ed1aa19bc66f3726a5414b8fb468b6577233f0a21b5a7717e54a9073b715b57ff51cfb9ff16b8bb1f03e51709410af9458efe3f8ac99ed149f6c4e9542cd02a0b818f4f4cc367ce4c8ee746bf16e9c54805fb7330787deac0e270bf399a70fc9bf9e761fb924b827a5434dba96f2d6997ebb3c3d50f2018d817ae08f73cf2a0c62ba0", 0xb7, 0x6) 00:50:05 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:05 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1000357bb}]) 00:50:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x13, 0xa, 0x101}, 0x14}}, 0x0) 00:50:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="9e326946b9c01147ecae9c7ba7026579e42ede75c1d4ea543c8b1497b33c1ff85d1ebb5172a84fed98eb3755f616aeaa28fb6471ef137e5268abd1a527602496157a1408703a69cbcca82b908873ae1cdcc5be07582ec4bd9d79de07e0d4c661bdaf8be58d53f3515b05d686fa3454762875d6ef5dd231455adab21c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) open_by_handle_at(r3, &(0x7f0000000100)=@orangefs_parent={0x28, 0x2, {{"dc0148fccd390f892fa5d8d4aa2f4791", 0xffffff74}, {"fba53127c43f97ffdfb60bc32686a0b6", 0x7}}}, 0x105440) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x92, 0x101, 0x22, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x7, 0x100}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x40, 0x90, 0xa8, 0x3, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x64, 0x0, 0x6, 0x38, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, {[@rr={0x7, 0x1f, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102, @private=0xa010100, @loopback, @broadcast, @multicast2]}, @noop]}}}}}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000780)={0x9, r8, 0x2}) sendmsg$nl_route(r11, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@RTM_NEWMDB={0xf8, 0x54, 0x800, 0x70bd28, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x5, 0x1, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x1, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x3, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x2, {@ip4=@remote, 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) 00:50:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:06 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f0000000440)="0a0d0b25461af4f76882107ff51852ea1731d4366adba0343b3d5d0d23cb5cf77475f47f0ab4c6daea27f70bbc7941aaecd2347602904be5465ea904a77a454ee674974d801782a95c782d044998690297f9867d9556d44da85488b6ba163012a7e250897687b9df9189a335020590c1d08f78b7469814fb6f37a8776a19e817b0389f5d38c56be55f4cb43de555c847896ba5bb5094337aa23515ee9f79d1f5aff544205f417b8eb6be07474ca69edbc508571b3a7d11435808bb59918603bf9d1aa926c0313f77e0703150a0a1665f60afd5e2fb784ea86c06c7f8f615f7cb6d", 0xe1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaae4d000000000000ff3fdd7a6002c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000589000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="0f75cc9af6ff2701baf80c66b8e1bae08c66efbafc0cec2e0f934900360f01c866b80093ba950f23c00f21f86635000000000f23f80fc71c3e3e3636dcf6b828000f00d0baf80c66b8505e268b66efbafc0c66b8edaefc6a66ef", 0x5a}], 0x1, 0x20, &(0x7f00000003c0)=[@cstype0={0x4, 0x1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x762}}, './file0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x40400, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x40400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa0b0}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)="157c7781aab105736a02a2ad9c038fdc94acbbca4964a603993c53cc9890e8553f7a40e2d2864e87a035f1ebe2a393df46381ada5ed1aa19bc66f3726a5414b8fb468b6577233f0a21b5a7717e54a9073b715b57ff51cfb9ff16b8bb1f03e51709410af9458efe3f8ac99ed149f6c4e9542cd02a0b818f4f4cc367ce4c8ee746bf16e9c54805fb7330787deac0e270bf399a70fc9bf9e761fb924b827a5434dba96f2d6997ebb3c3d50f2018d817ae08f73cf2a0c62ba0", 0xb7, 0x6) 00:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) 00:50:06 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x80000000000}]) 00:50:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000880)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) socketpair(0x28, 0x0, 0x6, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x28, 0x0, 0x6, &(0x7f0000000280)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}}, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) 00:50:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:07 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x401f00000000}]) 00:50:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="9e326946b9c01147ecae9c7ba7026579e42ede75c1d4ea543c8b1497b33c1ff85d1ebb5172a84fed98eb3755f616aeaa28fb6471ef137e5268abd1a527602496157a1408703a69cbcca82b908873ae1cdcc5be07582ec4bd9d79de07e0d4c661bdaf8be58d53f3515b05d686fa3454762875d6ef5dd231455adab21c"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) open_by_handle_at(r3, &(0x7f0000000100)=@orangefs_parent={0x28, 0x2, {{"dc0148fccd390f892fa5d8d4aa2f4791", 0xffffff74}, {"fba53127c43f97ffdfb60bc32686a0b6", 0x7}}}, 0x105440) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x92, 0x101, 0x22, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x7, 0x100}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) (async) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r9}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x40, 0x90, 0xa8, 0x3, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x64, 0x0, 0x6, 0x38, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, {[@rr={0x7, 0x1f, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102, @private=0xa010100, @loopback, @broadcast, @multicast2]}, @noop]}}}}}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000780)={0x9, r8, 0x2}) sendmsg$nl_route(r11, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@RTM_NEWMDB={0xf8, 0x54, 0x800, 0x70bd28, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x5, 0x1, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x1, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x3, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x2, {@ip4=@remote, 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004810}, 0x8000) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 64) ioctl$KVM_RUN(r12, 0xae80, 0x0) 00:50:07 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000880)={0x0, 0x0}) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) socketpair(0x28, 0x0, 0x6, 0x0) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair(0x28, 0x0, 0x6, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}}, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0xf62}, 0x8) 00:50:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:07 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x60ffffffffff}]) 00:50:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78b99fc253f1250009076098dd99d6b331373a1ecf2e54ce5510162530d5fedb0c3c717eb48d5ee86d20323c91f5c933d953eb75eb6166716330dd673f9d3bd5199b63dc35b1e06e3d5681e61f7bd8723a263a28ea47406c568438af7298649bc06513"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000002c0)={0x1ec4, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e9c, 0x3, 0x0, 0x1, [{0x1074, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1001, 0x1, "e39cc22a303c325d9c3a40a7bf423fea1ebdcf68ce9813100bbc5f6e3f0dd3237971d44117f90ed41fb27a02b2d94ec97c0f9329c57803430cefaedc29f916efdee89a5b8e98d96ac454fc1c5d3a5322bb86eb86160c5360f839b8ac2e19aee47ae45abef79f8d5419bd3745df135d4e6fd8bd994b3936e765ec10729e6602d72cf406de02b56fa526381c544c8a8052d6af0594b80ebdce6dfc422362d9eb2e435f730b6a8b2d2349b1ec8ca65f870dd5e014e6e6f62f192cc2fc86ce732a9beeccb9f66802935878109064e164ed086f03242d112a3865054c436e7f64bd470bf033416494b3eb96e1063bb3edcc07da6c2b3b4270d0587a8936b9e507d12b73f8c071d1fb5f6bf41c8cfe4593f2c28b76b5cd046101f6df0132445951fb73cd4ba5e6534c4863324eb14082d24d1cb9ed3eb8fe335e08432b59a957392b3b793b61a92d65e505e6f50c99082c0eed62511a3e7b21c1fe04b1d47deb6dea6d550c9bfec1a7b75cee1b64fa26d67ab018546445635946a72744c462d8a6f71cf9753b992838e5023c04d5a797a2043adaa6db1d60376be01a286ef717e6ab55fefe693476194839ecd8ccb1dc76f4eb6a57240e432810febb02aea292dbf3a88ef79fe4aa0d2b3dbd6a14bcffcaa39c5472966150df9cc6999b5a954504b6d0f86b9fa62bc0cf6c3654e3dc3ff5cea2919db6d2025d5fe62c282677454b1fe7ee135c3d1d0177eb823d97215b51469efaa6ce4f7450c3ca031bc11606bd855c4be16d5ae377ea02b74e65643fc47dd869140cf0c8d0619e4841ed4a0508500c3d0eb7ae372dc9881598cc876ef18c53aa86a37f737a0fa31cf4a0fbf4b494f18a257c4b7aae7e5e39455993bf2b58092b24746996d5b8c2194d8aa307faf9f322ed967b3f712d6559a147773b2670742b8c9e00112c7cf1f1eae0ffa0ad92e222740169b639a130341644cb316b0967dbe9847f41ca794172a484faca8b5b6ed0c4151baed17c2abbf3488db6f02a62804b90ea1ee0f49029ceddb32301a2d0915a509816bf85c3ffb6efa71fc6578d7ffe0057b5e98e3c68787746b52b24110204a8205d2f80a99719b5ccd7cd58f5c802f942334c1aa3ad7fc3659586ed356ab49c375108a93cda937fa27af3c5f560700f7e841bddef4efbbce5c9fc0b89c89d5671857cbbf87f4f7ca038d2102a79684afa1f078543124b52b28e401d004c6af8747ad2e604c0a9f2e68fe6761f6840f380ad7ba55e606b89b2e4bb9e2554d10bc8b5de38ea11ca8e0c765517b2e060a595af9d797091b34b9eb06762e9b08c35cc66f73162e7fe83e92baf9bf5333db27d8b7738a6e1099430391cd85e7376e74627f827675cd69eabd1453b74c3340a7875f478a36e80552033ad0c23d7bbe4b82303e23095ff757455273b7c776c78b0cf82a09feb6dad068dcb1b568be9337671fe227a14352954bca9178e692613ec486e2d3bac46bc48a8ca75e6ec67e7a44f5e8ad80ec13bc230392341a70115ed16eece42d73429c5a731c3be61ff163a3f5388134332d7fcda979f9c267f7058cee462e820a6c7c2ec58bafe3ed5a667fb96f20881a96dae03d5de18a61bb96cc43e9de91f81c0f8a31542c201d59ad6f8977e5dacc5cfc8766294073a61c2d498177d812cfe159415c66254c1980fddc278268f095d3ab9903dba0c70530ca947759a4e5787fa779dc0a0261aaf892c2c09d571eb3b9c545b91250483e8df7e1bdfba40b5e679a6a6cb385e6159b049eaa35ad245b5f79047a32138b076bcf6e59ff5d41a75ff1622e8095ef179d62ee970b3d5b63039df719632f63f10697441ea3f941f992ff4df1818e7537e42c1bec598e92ff4d37238d22df6327c52058444efb4a7eb745ec4d20ab49cf7992cad9bb1cef8c6db498cffbf42bd6157cc24cd8ff18bbb788c27ffa9a2a1cf9fcd884e8efa02d6739f90454d82013818d9b4163a9f87450f0234f10a49cc42520b756e7a777d9f233aeb690aa23210541ef2d587cd5869aa98c582eb5da590d24750540ffdd1a99f4d6726f1dbbd0b922ee448bc39da5b0fc9f9ad3d067668c7877c2e795af8496d8a5d14e009670e3036a8d16836dc75ee810ff9b779d68fb0955c54cacc0b43f3f0fcbd7e19bf07ee60e76414eb869054a8f7a98dd1c4e64323ed1702dcd39e5f2bc5bede3d9ca3f661a5211795de4a6073fb4af5a56d2756916c68529b6abd4401391b8cdb1c5df7b7b63768076a8414071f44f505b216357509677484b31c60ca86004f812114a869af4d3b9d3ca6cc6914a8554b2cf1d7c8ca4648a426b51034363e8e12c8b4bbe83cb68a3a40be1e1b6a052c3aeae9dc67383eef4861c308403c5733b24ae23069f943b051aca765cb6caf286ba1494b93727ae8cbff2f658530651e12dc15e9a02cb33d30a4996c8ca6212430b063738ec4d7513de3480a139ed7c5e32130d58cc5191899dbb842119fa0d7e1df01e429ce262e15fbac3e65e4a301f1da986349acdad6f7ca21d809b75e123fb2cee5b1d90df31d49c049e4e6b2b5fd24d18f8a9887655964cd15fdeb66e5f9ed26d0236b7b9302d07b9ebb05204f798d4ca5717027a90782e464ebcc7279ee34cda6e15a1009aebc62145bab407ca67c6e0c1a15fe3c8ffab33383b2905e40faf74291d96222f2cd75853eff469f955b956519b209db673d56aaef4d4f26e1910a767aadd5a0b92e143056ed97fc5eb73cef61ac28f29633d522cc12460ccfaae40ede05aa12a91888f0f1ca2bf2e5ccf8166f61026c748777bc8d85d907c0e27ce372efbaae3f061738fcd1f3a42668c83d27a4fe77d983f24b3f05a9219226743b4afa3f919639fff32e7aa9430af23420d6fe56f4867ea64403e7d001a681addfb49dbbd8a7a16a6f3f2fa83acf4b44fdcaf99547ce795889439223b82c65ec580cb912e25da3d2587311cb6f4c071e5d79f4d3b16f78befdaeb4bc9a25083de102c63bf3b44b76d460a84a8b39f6232d8d466efc8f3e100a0c053912418cbf91f93117db102d59def84191cdfbe4f159e7b3f1f7013d2de98088f4ec0cbcb126d28205a546248257e30bda2a433f88c22cb116dc0a3e431c509be39dae75ecb1f9c921aca6b3939fa8cc62c72ee3524dbd2b41484e4fe5f1049a1f761ed6a4c0e0b5a9a6922a97acf2cc13eccf749d641f297af4effd2432a302fd2e8e10443075659347d89c8b328797385c6c7456dd358eab913e3d9ecb5fdda215e4543dc89251e722f3b6e42b756906e2ddbc6b4d0b68dbeb7c410df6156154d9ea32bed2c2a14bd32a16846c281b5707da5c3a781e26d1acbe16e5e3f714e9ad4f4eeb472ba023e9ad1bb623e152b5ad75bd6b868edd9c33bed6247f8bbfba8a3e07dbd4079b398c455088f5f1beba3636131b4a2a81977140de4356c95f278abb21b514c56346f3c77cdce8eea1d76d7a58622397fa2b0c272a896d235684c85f10e66a1c3dbbc4996c539fc7911889191d8207c6f705b0a759e61652382ba2c12626e327204e3315c4d423f04b39b5d2b33cbe73ea9110e3e8d487f942f2f57ddaea1812f5c93423042e7b203aff5ce5caffa5dc9d582a7aaebf5745cda30806508335e2dfa054a9c62d90958bd087e2dd6aac2994bd5caa6b7371b14f70c6c5599fde3dc6161af193790ac808057a41b36fe677c11824571d61c371d23ce92d4e9785735eb767e5be09145da157f3a0836ec2458294aa685360ba0bb1535c2f229c202449b544d4294564ae34f989d58205a5ce9de208069edacb871476e69c226b28033d63f5141236b66895cf7491d97e2e099814b66b85798a9daa3bfc75b73a65e9d2eee0589effe9156ee2bebf823e74b08b394a03aa775fa400a35a15d8af7c39ded316de0037df58e3062686b37f0e9718174f7142ad55ace537457183da0f40788fd7356540b892d36c3535069c17c929d2d47267207f1604d8add1d27cf86ffe4afede0e4d6824a794d2eb589e41602328eea48fb7322ab502ee5e869e4b62d23a50864217663ec43b403a63bebf07b8bb061816c61d0dc637948b86e4e54c0b08f1c0e24fe85aaa2ea95e842bcc131eeff5a4848969f100b63c48dd4b00132da587614c7fd623119431189a70a888ff353185e1205ac5020de4bc9455c74719710d1e8a0a03e6de1c5143d79b894ed4e9220bfaf62dca51431ec27d20aace2c82c1d222a95bdd5257b0bae13ec8428505adb67d1d8ba8d0f820c59b57450fea187e9b8c9f691d5f37d96d3122dafdd04f13f42157003f806ec1473cc74471dd0cdecc4d2b9bf68453b29ed4a7710a6c85b701bed2640e179ccc461b70b95484ee6b41c506e8102f8df1cb53da43f074aef157c425a0a0504956f8123cc561af573db279b2a87d646ad4a29b441235f4e21e395ac911a830bab91b257bd1b4d0ecde0a4791e6570c221c5f8a2cc183a435839f803a95b5feb235fae1b90dacb37399bcd2151ef5c1889819b28a7495d1894ff3d4be302594d7598ab778ad6e9f1a26c5ffece863cb7d4f982c7bcd88603dc82a804d7cd523c84a9fdb5c0fe8053bcfe0150e54ce2145e3a1303f662c63d7ea1532dcb40d30ae87d357026312f8c9dad6fbe1cbc0a25acea3cb4125e2f2f21e1c7557277e9446d4fcd959251761c664262ad8bf960ef4ff9bc66ad0dd8694786446d8c8463281c96ad8399044f84cde5501a8e8d2f1d55c4e858f20448dcff115b925abe9b389a3c97acf1321c48b8df28ea47d84a776d0097720d3de79ffc88060ce5e8eb5a9dc587cab858bc4cb178479135ce51466efbfb83c44fa86a55f462ac6a8eb2fbaf4efdb839bbfcda21391ede85f3c4ad09e8d98231a31d5a2182874043fd4f7b0e71fb8fded47d02110910a3afcf561d512bc4976806529a5333d8c1cfaaf9a5f08d57c11c7d89151feaa7a69a82704cc26cecaa86f2ed7fbe054697e0054855e8dc1ed315394d2ea3837940900c5a261c72243ff8b63472a4fbcf756a6cece861663f992883e540011a827783e059ae589ab9863a7fa0183d15e1c58a211d92cb67cbc7039fd5f47669a0ea1b51b9ee33baba9a17c164aa5035b728d50b8cb119bf7a6ca9f0b5d0b6a7eb522420a208df7d5ec55cde471d87faf4a8fe3fdf269be0dd1bc92b1ea58cc15acfbc5e3e16747b100eeb5f1107bcdd656dd217382e0ad0b307190c8e8f2e6254c12d6d879218548c91f740f6ebff9d8b68e89af86a0c8b0c95e85ca88125491db1c82a43ecc538264cb32e129ee5a6b5b1ce22db01bf138381a2b515208af7bcf737406d1b7be93013e946c0e14f17ee40f1ea6d93ac60888d85523a271b7b2698874c2dc1e78404b61c6251e21de0cf5c42e959dfcec7e9af06e2a7e6eef4ea8dfb9714b1d1e43dec61be97c1c2a91f6a44e62cee4856408a74bad35d164e76c7027c457bdcee6bc239c9cd54a5c9977c3afe6ca25b692ad0cb374e0247cff3c3e4df31399b46639cbad91fe7b28e0d6dca0d750f58ad02f126c2faad5fea9870a25f1f2f2048477a29a184563bd12ee7442f864aad120eb9032ae3eefd1ce7e3fb01349de2f329a51b61e98da089f4af8fb8a621ceb0018dd41399bfbb2887d3412302557aa40d19d3cfec95093b4603aab384d1b25d02ee956f7ac4172d47eb701f7949fdaa9747c15b2f6b14ed942775ea4c1c6a79a179cfd620e21a6df66434c697778c75f2ca30a2ac5ba9a2bb7a95c6b72c33e303d38a896472fb3e846f2ba906ab0b936f51b5698cfb2ab7b6aa28e54d1"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0x424, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_FLAGS={0x8}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_SREG={0x8}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_DREG={0x8}}, {0xc, 0x1, 0x0, 0x1, @NFTA_LOOKUP_SREG={0x8}}]}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_SEED={0x8}, @NFTA_HASH_SEED={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5}]}}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "956b3cee7302c036c397986222e234ad9b7c47e071d4a39d930ee809a8c397c9c6d37df2b9848aeb00baa36b79d3a4989705921c5eed093c08da0e35c05e9ae6f362b785d240454424905aef0bcfe6a1cf4137346e92b61df466552264e1c08e94fd532f50289d7abc02f903bc5c89958ac1aa97463c42ed4589a09d5c92225256f6eca4855214834e4455812ec9537251817e3d55da7fd786833e3d3ddb2094f1da0fe3341a3e3e46644460f994453f317d2dbfbe7f868f3fa1e0f62836d98fc6b8cda34a80500214"}, @NFTA_DATA_VALUE={0x19, 0x1, "94461aed06772e438ae1a451a4cc195a83ac674c8e"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x450, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "47ae2631fb80780cb3bcde193027c4c589afdab9830b826d3c31906192b6fab01f1248557f7d3ba56e3bc6135342b1f08601c223c9a3979c312c042fa8995e424c1ed7a12bd815757fdc95705674df5ac2bfc142cae53ed9f521659bb3382e3524975e020405f0efc4559ff85b2f41b1a8270dcc566bc3026a78753ae07b4fdbb12d619ab08009af1adcd4c1319ca2d6e9cd5dce448d53546b130070c386d18f05e724bbf72242a4de28b060eba38e805fc70c55ed8bcc9b88301a7148f73e6bff"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x71, 0x1, "e39a78bda8548cfdb13a1c52fd4e80f9e2ded52768ebebdf2943b7abf4197b9c6fefe0bdd38a405a6e81d4f937ae3764d7dabcaf7ddef7d4e1dfa41c6656025d0e1c56f834c645e1d88dc3688140c36f3e25cfd8e4c738684fe4f366333ea0720c7f6bcd3c1de70586be945c02"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "58b038dc13d5d187c02efb5dd49ad804e679b24e3bea97077c903e18faf99f32f6a8172e4af6a5f0f43af109a5e7c1ebf0cd1a663a67ef14092f205cb5c87cc0e086db856dbdc224c233846b13864e286c9a2c7037e1321601f4f243a232b2708c9b3e3a9a92f0daea33752aeb0aef3c7ebaea362ed20fb19684b5bff4c6ba306c7d9823bff4893f22417fe5a5f745377db026b221e80e2308665a1c768a33e460ae7a2c4d81c74a554d8755aab2a0f879ec4dd30e5a8db16a56ab87a985b235bbb678134e"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0x1b0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "b2ad9747cffe2eb9a7514c97461b51c3e75b20a666360c058b6acbca1d1392ecce08a00f1b7c5d668459d9299d07beb28ecc0e60b9fd02462653572935180770421e6270f180e5688a8225cbcf654f5b74f02a7d1d12fd7df9bf31d81683592f83"}, @NFTA_DATA_VALUE={0xcd, 0x1, "5eef74299368ecdcbac264a2e17f0290aa0b202fd097e348efabe4ce0a30aa36af5133953e4b218e54708f407d13729565dc7873626d2cc927df4fb65a67c2ce6a6aac0b9737c894f2988c6a47c4aef6039b86f569fe9d1dafd104b219db2c7beddd192d344b5ed7012af4d879f4e2b5c5b6694d3f5cdba831bf0e38dc9cd6e407cde4e7b32cafb7b126af5ae91acb5dd97657f933dc19776f71ec0949ebd4f14931e6699b5648d8f9433c3b67345cb5865db8767385f7cfaae927132298950dc06c5ac45d7cf5c5e9"}, @NFTA_DATA_VALUE={0x71, 0x1, "c69dd506e69bd53b8cf398a1a3ace8235e3d7b6b02b7032655d2e2067bb05e6c0a971375fccc5324a501708e978e308375aaa1890d8237ad0c5341c311d5d12d7ff1ca89a099cb4a1ff3bcb657e584b2b40037a75e696b29d322d9de5af8f63b9a722d0c1ecc6c1d3140ebf545"}]}]}, {0x5b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x599, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, 0x1ec4}}, 0x0) 00:50:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:08 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x10000000000000}]) 00:50:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaeefee0c9c98d309acd3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0xfffffffd}, 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100), 0x10001, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)) 00:50:09 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x20000000000000}]) 00:50:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:09 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002800)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)) 00:50:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78b99fc253f1250009076098dd99d6b331373a1ecf2e54ce5510162530d5fedb0c3c717eb48d5ee86d20323c91f5c933d953eb75eb6166716330dd673f9d3bd5199b63dc35b1e06e3d5681e61f7bd8723a263a28ea47406c568438af7298649bc06513"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaeefee0c9c98d309acd3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0xfffffffd}, 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:09 executing program 1: syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') 00:50:09 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x100000000000000}]) 00:50:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:10 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_vlan\x00'}, 0x18) 00:50:10 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x200000000000000}]) 00:50:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaeefee0c9c98d309acd3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0xfffffffd}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0xfffffffd}, 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:11 executing program 1: openat$snapshot(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 00:50:11 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x204000000000000}]) 00:50:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78b99fc253f1250009076098dd99d6b331373a1ecf2e54ce5510162530d5fedb0c3c717eb48d5ee86d20323c91f5c933d953eb75eb6166716330dd673f9d3bd5199b63dc35b1e06e3d5681e61f7bd8723a263a28ea47406c568438af7298649bc06513"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3462.252812][T20365] random: crng reseeded on system resumption 00:50:11 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x300000000000000}]) 00:50:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x6, r2, 0x80000}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/exec\x00') syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00000a1000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="0f01df8fc9d095bd000000000f0fc41db9800000c00f3235010000000f30400f01f844c13f0066410fe1e8490fc71bf448b800100000000000000f23c80f21f8350400c0000f23f8", 0x48}], 0x1, 0x50, &(0x7f00000002c0)=[@dstype3, @vmwrite={0x8, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x2) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:50:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:12 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x220002, 0x0) 00:50:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c02b8dff3f4645dd475202d026d28278"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x1000, 0x10}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x8000) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = fcntl$dupfd(r2, 0x406, r2) io_submit(r4, 0x4, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f00000001c0)="de9826d10d5e705a3b7549a31cc35b88727e80f33688e89db831fd95da1bb5b3d749213a", 0x24, 0x800, 0x0, 0x2, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000240)="0adf0eb121c64fdb55e1857755de76e5bf43dee53c052d32928bb62358cdc1523f4ab5fbdcb3b486cb4ea2b40e783d4fd5495b6db61953479397b3ec0c68971f8c109445964c6c838ce11b60410e5ef1919387bf03499ffaf9cb4e9bb6b23a9c7af679701a28163a23b48e34f479c5d84b27b672b273d89b2da5cdd0496134894514a36e00e2bfe5482746acc522075303fc3990b6fc2381e38fd7b9a9af35cf2fffa1b5b831a18fb54f51", 0xab, 0x5, 0x0, 0x3, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000440)="8075809d3d2908b85226b4fca5a6becd935712296e00185cbe45da4d2dd26587a6b344ed57ccbd2aa150a1c5581ab790138cfe7e95e72e81a17e7fc1be8a8cd4023be91548ed7e90d91615dafa7f8a229521dbd67c3e6fd6132592bc44782c33d751d25868cddf8a6e226b644a18371e2581e75e048aaec32d3b7509127a8bed0f", 0x81, 0x7, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000003c0)="470f711e3031f776a2b3641848598f0ae48d6af712ab510066f6af0e0c08ded0d2e51516ba26ab", 0x27, 0x2, 0x0, 0x2, r9}]) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r10, 0xae80, 0x0) 00:50:12 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x400000000000000}]) 00:50:12 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0xd, 0x0, 0x0) 00:50:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0xb) 00:50:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:13 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x500000000000000}]) 00:50:13 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000b00)={0xfffffffd}, 0x8) 00:50:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c02b8dff3f4645dd475202d026d28278"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c02b8dff3f4645dd475202d026d28278"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x1000, 0x10}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x8000) socket$kcm(0x29, 0x5, 0x0) (async) r8 = socket$kcm(0x29, 0x5, 0x0) fcntl$dupfd(r2, 0x406, r2) (async) r9 = fcntl$dupfd(r2, 0x406, r2) io_submit(r4, 0x4, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f00000001c0)="de9826d10d5e705a3b7549a31cc35b88727e80f33688e89db831fd95da1bb5b3d749213a", 0x24, 0x800, 0x0, 0x2, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000240)="0adf0eb121c64fdb55e1857755de76e5bf43dee53c052d32928bb62358cdc1523f4ab5fbdcb3b486cb4ea2b40e783d4fd5495b6db61953479397b3ec0c68971f8c109445964c6c838ce11b60410e5ef1919387bf03499ffaf9cb4e9bb6b23a9c7af679701a28163a23b48e34f479c5d84b27b672b273d89b2da5cdd0496134894514a36e00e2bfe5482746acc522075303fc3990b6fc2381e38fd7b9a9af35cf2fffa1b5b831a18fb54f51", 0xab, 0x5, 0x0, 0x3, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000440)="8075809d3d2908b85226b4fca5a6becd935712296e00185cbe45da4d2dd26587a6b344ed57ccbd2aa150a1c5581ab790138cfe7e95e72e81a17e7fc1be8a8cd4023be91548ed7e90d91615dafa7f8a229521dbd67c3e6fd6132592bc44782c33d751d25868cddf8a6e226b644a18371e2581e75e048aaec32d3b7509127a8bed0f", 0x81, 0x7, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000003c0)="470f711e3031f776a2b3641848598f0ae48d6af712ab510066f6af0e0c08ded0d2e51516ba26ab", 0x27, 0x2, 0x0, 0x2, r9}]) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r10, 0xae80, 0x0) 00:50:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x6, r2, 0x80000}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/exec\x00') syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00000a1000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="0f01df8fc9d095bd000000000f0fc41db9800000c00f3235010000000f30400f01f844c13f0066410fe1e8490fc71bf448b800100000000000000f23c80f21f8350400c0000f23f8", 0x48}], 0x1, 0x50, &(0x7f00000002c0)=[@dstype3, @vmwrite={0x8, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x2) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:50:13 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280), 0xcd8e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)={0x1}) 00:50:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:13 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x600000000000000}]) 00:50:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d80)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) 00:50:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c02b8dff3f4645dd475202d026d28278"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x1000, 0x10}, 0xc) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x8000) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = fcntl$dupfd(r2, 0x406, r2) io_submit(r4, 0x4, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f00000001c0)="de9826d10d5e705a3b7549a31cc35b88727e80f33688e89db831fd95da1bb5b3d749213a", 0x24, 0x800, 0x0, 0x2, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000240)="0adf0eb121c64fdb55e1857755de76e5bf43dee53c052d32928bb62358cdc1523f4ab5fbdcb3b486cb4ea2b40e783d4fd5495b6db61953479397b3ec0c68971f8c109445964c6c838ce11b60410e5ef1919387bf03499ffaf9cb4e9bb6b23a9c7af679701a28163a23b48e34f479c5d84b27b672b273d89b2da5cdd0496134894514a36e00e2bfe5482746acc522075303fc3990b6fc2381e38fd7b9a9af35cf2fffa1b5b831a18fb54f51", 0xab, 0x5, 0x0, 0x3, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000440)="8075809d3d2908b85226b4fca5a6becd935712296e00185cbe45da4d2dd26587a6b344ed57ccbd2aa150a1c5581ab790138cfe7e95e72e81a17e7fc1be8a8cd4023be91548ed7e90d91615dafa7f8a229521dbd67c3e6fd6132592bc44782c33d751d25868cddf8a6e226b644a18371e2581e75e048aaec32d3b7509127a8bed0f", 0x81, 0x7, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000003c0)="470f711e3031f776a2b3641848598f0ae48d6af712ab510066f6af0e0c08ded0d2e51516ba26ab", 0x27, 0x2, 0x0, 0x2, r9}]) (async) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 00:50:14 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x604000000000000}]) 00:50:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x6, r2, 0x80000}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/exec\x00') syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00000a1000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="0f01df8fc9d095bd000000000f0fc41db9800000c00f3235010000000f30400f01f844c13f0066410fe1e8490fc71bf448b800100000000000000f23c80f21f8350400c0000f23f8", 0x48}], 0x1, 0x50, &(0x7f00000002c0)=[@dstype3, @vmwrite={0x8, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x2) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:50:14 executing program 1: syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000400)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @random="33b9483c45d5"}, {0xb}}, {@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b}}}}}, 0x38) [ 3466.078778][T20458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:50:15 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x700000000000000}]) 00:50:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="0f080f23b665f30f1ecc67660f38803532b30000260f01da360f01c9f3ff290f20e06635400000000f22e0baf80c66b8f9ed948966efbafc0cec0f20c06635010000000f22c0"}], 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:15 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280), 0xcd8e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0xffffffff) 00:50:15 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x800000000000000}]) 00:50:16 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) 00:50:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[r1, r2, r1, r0]}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) write$binfmt_script(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000500000000000000475202c1e0f60f7074555182c2e5e166755e4dbcd7b1b0ce0ae3e81825a6fec75754b68ab3ea5fe0769c4d4815da8d681b9b1354dc439c8ed9d08b428f72476d21469f04d37f86de37fedb01d47bcd6bcea65ca713c95f06257a2c65210b496ec8f09281326262cf96ef1c57ea289bb6b06dd9b40000"], 0x208e24b) r4 = syz_open_dev$sndctrl(&(0x7f0000000cc0), 0x4f, 0x400980) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={0x0, 0x3ff, 0x8}) r6 = inotify_init1(0x1000) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000002600)={r5, "767fbc8e6ab4feb0b3f528f22304ed0d"}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000840)=""/140, 0x8c}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000000a00)=""/205, 0xcd}], 0x7, 0x8, 0x200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x7, 0x100, 0xff}, &(0x7f0000000240)=0x10) r10 = gettid() tkill(r10, 0x1000000000016) move_pages(r10, 0x4, &(0x7f00000001c0)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000643000/0x3000)=nil, &(0x7f00005a7000/0x1000)=nil, &(0x7f000023e000/0x1000)=nil], &(0x7f0000000c40)=[0x6, 0x0, 0x1, 0x8, 0x1000, 0x3, 0x800, 0x7, 0x9d6d], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r9, 0x3}, 0x8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x80047210, &(0x7f0000000d00)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 00:50:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:16 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x810000000000000}]) 00:50:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x800, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 00:50:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="0f080f23b665f30f1ecc67660f38803532b30000260f01da360f01c9f3ff290f20e06635400000000f22e0baf80c66b8f9ed948966efbafc0cec0f20c06635010000000f22c0"}], 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000000180)) 00:50:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:17 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x900000000000000}]) 00:50:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x5, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000580)={{r0}, &(0x7f0000000500), 0x0}, 0x20) 00:50:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="0f080f23b665f30f1ecc67660f38803532b30000260f01da360f01c9f3ff290f20e06635400000000f22e0baf80c66b8f9ed948966efbafc0cec0f20c06635010000000f22c0"}], 0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[r1, r2, r1, r0]}, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) write$binfmt_script(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000500000000000000475202c1e0f60f7074555182c2e5e166755e4dbcd7b1b0ce0ae3e81825a6fec75754b68ab3ea5fe0769c4d4815da8d681b9b1354dc439c8ed9d08b428f72476d21469f04d37f86de37fedb01d47bcd6bcea65ca713c95f06257a2c65210b496ec8f09281326262cf96ef1c57ea289bb6b06dd9b40000"], 0x208e24b) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000cc0), 0x4f, 0x400980) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={0x0, 0x3ff, 0x8}) (async) r6 = inotify_init1(0x1000) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000002600)={r5, "767fbc8e6ab4feb0b3f528f22304ed0d"}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000840)=""/140, 0x8c}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000000a00)=""/205, 0xcd}], 0x7, 0x8, 0x200) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x7, 0x100, 0xff}, &(0x7f0000000240)=0x10) (async) r10 = gettid() tkill(r10, 0x1000000000016) (async) move_pages(r10, 0x4, &(0x7f00000001c0)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000643000/0x3000)=nil, &(0x7f00005a7000/0x1000)=nil, &(0x7f000023e000/0x1000)=nil], &(0x7f0000000c40)=[0x6, 0x0, 0x1, 0x8, 0x1000, 0x3, 0x800, 0x7, 0x9d6d], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r9, 0x3}, 0x8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x80047210, &(0x7f0000000d00)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 00:50:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:19 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1000000000000000}]) 00:50:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x0, 0x40}, 0x48) 00:50:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000065c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b82e31118766efbafc0cb000ee660fe0aac31e660f3880b000000ff916fc7f0f20c06635040000000f22c066b9800000c00f326635000800000f30b85c078ee83e660f38808d00002e0fc75d00b80b008ee0", 0x56}], 0x1, 0x5, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80000001}], 0x1) 00:50:20 executing program 1: bpf$MAP_CREATE_RINGBUF(0x10, &(0x7f0000009800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:50:20 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x1800000000000000}]) 00:50:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[r1, r2, r1, r0]}, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) write$binfmt_script(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000500000000000000475202c1e0f60f7074555182c2e5e166755e4dbcd7b1b0ce0ae3e81825a6fec75754b68ab3ea5fe0769c4d4815da8d681b9b1354dc439c8ed9d08b428f72476d21469f04d37f86de37fedb01d47bcd6bcea65ca713c95f06257a2c65210b496ec8f09281326262cf96ef1c57ea289bb6b06dd9b40000"], 0x208e24b) r4 = syz_open_dev$sndctrl(&(0x7f0000000cc0), 0x4f, 0x400980) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={0x0, 0x3ff, 0x8}) (async) r6 = inotify_init1(0x1000) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000002600)={r5, "767fbc8e6ab4feb0b3f528f22304ed0d"}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000840)=""/140, 0x8c}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000000a00)=""/205, 0xcd}], 0x7, 0x8, 0x200) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x7, 0x100, 0xff}, &(0x7f0000000240)=0x10) (async) r10 = gettid() tkill(r10, 0x1000000000016) (async) move_pages(r10, 0x4, &(0x7f00000001c0)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000643000/0x3000)=nil, &(0x7f00005a7000/0x1000)=nil, &(0x7f000023e000/0x1000)=nil], &(0x7f0000000c40)=[0x6, 0x0, 0x1, 0x8, 0x1000, 0x3, 0x800, 0x7, 0x9d6d], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r9, 0x3}, 0x8) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x80047210, &(0x7f0000000d00)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 00:50:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 00:50:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:21 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2200000000000000}]) 00:50:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000003c0)={r2}) 00:50:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000065c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b82e31118766efbafc0cb000ee660fe0aac31e660f3880b000000ff916fc7f0f20c06635040000000f22c066b9800000c00f326635000800000f30b85c078ee83e660f38808d00002e0fc75d00b80b008ee0", 0x56}], 0x1, 0x5, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80000001}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000065c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b82e31118766efbafc0cb000ee660fe0aac31e660f3880b000000ff916fc7f0f20c06635040000000f22c066b9800000c00f326635000800000f30b85c078ee83e660f38808d00002e0fc75d00b80b008ee0", 0x56}], 0x1, 0x5, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80000001}], 0x1) (async) 00:50:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:21 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x2e00000000000000}]) 00:50:22 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000740)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffeffff5000}]}) 00:50:22 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3000000000000000}]) 00:50:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x800, 0xf801, 0x1, 0x0, 0x1}, 0x48) 00:50:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:23 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x6, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfff8, 0x7, 0x0, 0x0, 0x0, "ae54b07c013901afe700126d5bec2960ad661ffa4c7a705c6613d7040a2314f8"}}) 00:50:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000065c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b82e31118766efbafc0cb000ee660fe0aac31e660f3880b000000ff916fc7f0f20c06635040000000f22c066b9800000c00f326635000800000f30b85c078ee83e660f38808d00002e0fc75d00b80b008ee0", 0x56}], 0x1, 0x5, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80000001}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000065c000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baf80c66b82e31118766efbafc0cb000ee660fe0aac31e660f3880b000000ff916fc7f0f20c06635040000000f22c066b9800000c00f326635000800000f30b85c078ee83e660f38808d00002e0fc75d00b80b008ee0", 0x56}], 0x1, 0x5, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x80000001}], 0x1) (async) 00:50:23 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x3f00000000000000}]) 00:50:23 executing program 1: timer_create(0x4, &(0x7f00000000c0), 0x0) 00:50:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000180)) 00:50:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3475.307168][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 3475.314620][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 00:50:24 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x4000000000000000}]) 00:50:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x714, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3}) 00:50:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 00:50:25 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280), 0xcd8e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0x40045702, 0x0) 00:50:25 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x7d0e000000000000}]) 00:50:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c02936be6be24f19d08ddbcbb6000346bfd0a3fc0d3e000000ff3fdd47"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:25 executing program 1: bpf$MAP_CREATE_RINGBUF(0x22, 0x0, 0x0) 00:50:25 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xbb57030001000000}]) 00:50:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0}) 00:50:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c02936be6be24f19d08ddbcbb6000346bfd0a3fc0d3e000000ff3fdd47"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:26 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xf4ffffff00000000}]) 00:50:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:26 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x3}}, 0x26) 00:50:26 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xf8ff3f1f00000000}]) 00:50:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x402081, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000180)={0x0, 0x6, 0x400, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='A('], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c02936be6be24f19d08ddbcbb6000346bfd0a3fc0d3e000000ff3fdd47"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='erspan0\x00'}) 00:50:27 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xfbffffff00000000}]) 00:50:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 00:50:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x6440, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9760900000f32f2af66b91f0001c00f320f20c06635040000000f22c00f013c0f01d126def40f073e64f2ae0fc79a8a70", 0x32}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='A('], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:28 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffefffff00000000}]) 00:50:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x402081, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000180)={0x0, 0x6, 0x400, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:28 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280), 0xcd8e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)) 00:50:28 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffffe70300000000}]) 00:50:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x48) 00:50:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x402081, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000180)={0x0, 0x6, 0x400, 0x2, 0x5}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x6440, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9760900000f32f2af66b91f0001c00f320f20c06635040000000f22c00f013c0f01d126def40f073e64f2ae0fc79a8a70", 0x32}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='A('], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:29 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffffffff00000000}]) 00:50:29 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 00:50:29 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffffffffff600000}]) 00:50:29 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) 00:50:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x6440, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9760900000f32f2af66b91f0001c00f320f20c06635040000000f22c00f013c0f01d126def40f073e64f2ae0fc79a8a70", 0x32}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 00:50:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:30 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0xffffffffffffff7f}]) 00:50:30 executing program 1: socket$unix(0x1, 0x1, 0x0) select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000440)={0x31e}, 0x0) 00:50:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1dc, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf4, 0xc5, "b3d244c41cad7d9fc3dda70c02a82e985285e497f246314c0609fb9dddfc9846cf9e75b58dc5788b158cc3587916cc0cea1cbd996d400f9527e7cb7727b9e9df9468e9ff303f1a2c5922aaa80b536db5708d76a10ec9e44f70c833a0f7f426eb3a8d1e15680512761d2a5c7a8bfb2466eb08f9e3a23a351d9a8eab2b4775a49f84727fcd4e6606fa1cc5f5d82a08dffa846449032ad4cdd395ce14b7836d82b1ea48631b8aebf5e52627b980df34d3db56f89a6db95a16a4bafbc6b70947cc7c20343dd383ef804a70179d535d0a10f0ece3421e4d4ed124218e82e25cc460253e6e46366e6e2f4a3aeca872ac3b86d9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x14, 0xc5, "fa48501ac3420450c528a744c18878d8"}, @NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "a012742fff7bc2487b377d1c1cea46b8e3e6285eb6eab843f401343dc1b3f313572f15604120a503b2e2baec6f8ffd795d827943fa0a451f5c18477eeb175cc40ae15673567deaacf4123386a1a6ee3ef395ddb874f9e4fe3f2bbc0f6641dbf0aa2a4e7565ad63373d6b7e33efb8a6ae5d0173456998d4d8a695b0b6a8358d15c7dd046e45f8e6f5c4c2d484d15fe3a6a90d0e207e92cab0be9fc22bbf0cceb44c2d2f8a3de9d45d69363cd2"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 00:50:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:30 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}]) 00:50:31 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000013c0)={@local, @remote, @val, {@ipv6}}, 0x0) 00:50:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60ff0b892e1d60ed0c8e5946c4864e2aaee4d000000000000ff3fdd475202c1e0f60f786139015962806e37aab4be8f921b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) 00:50:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3482.098898][T20789] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 00:50:31 executing program 1: mlock(&(0x7f0000913000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4) 00:50:31 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:50:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1dc, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf4, 0xc5, "b3d244c41cad7d9fc3dda70c02a82e985285e497f246314c0609fb9dddfc9846cf9e75b58dc5788b158cc3587916cc0cea1cbd996d400f9527e7cb7727b9e9df9468e9ff303f1a2c5922aaa80b536db5708d76a10ec9e44f70c833a0f7f426eb3a8d1e15680512761d2a5c7a8bfb2466eb08f9e3a23a351d9a8eab2b4775a49f84727fcd4e6606fa1cc5f5d82a08dffa846449032ad4cdd395ce14b7836d82b1ea48631b8aebf5e52627b980df34d3db56f89a6db95a16a4bafbc6b70947cc7c20343dd383ef804a70179d535d0a10f0ece3421e4d4ed124218e82e25cc460253e6e46366e6e2f4a3aeca872ac3b86d9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x14, 0xc5, "fa48501ac3420450c528a744c18878d8"}, @NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "a012742fff7bc2487b377d1c1cea46b8e3e6285eb6eab843f401343dc1b3f313572f15604120a503b2e2baec6f8ffd795d827943fa0a451f5c18477eeb175cc40ae15673567deaacf4123386a1a6ee3ef395ddb874f9e4fe3f2bbc0f6641dbf0aa2a4e7565ad63373d6b7e33efb8a6ae5d0173456998d4d8a695b0b6a8358d15c7dd046e45f8e6f5c4c2d484d15fe3a6a90d0e207e92cab0be9fc22bbf0cceb44c2d2f8a3de9d45d69363cd2"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1dc, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf4, 0xc5, "b3d244c41cad7d9fc3dda70c02a82e985285e497f246314c0609fb9dddfc9846cf9e75b58dc5788b158cc3587916cc0cea1cbd996d400f9527e7cb7727b9e9df9468e9ff303f1a2c5922aaa80b536db5708d76a10ec9e44f70c833a0f7f426eb3a8d1e15680512761d2a5c7a8bfb2466eb08f9e3a23a351d9a8eab2b4775a49f84727fcd4e6606fa1cc5f5d82a08dffa846449032ad4cdd395ce14b7836d82b1ea48631b8aebf5e52627b980df34d3db56f89a6db95a16a4bafbc6b70947cc7c20343dd383ef804a70179d535d0a10f0ece3421e4d4ed124218e82e25cc460253e6e46366e6e2f4a3aeca872ac3b86d9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x14, 0xc5, "fa48501ac3420450c528a744c18878d8"}, @NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "a012742fff7bc2487b377d1c1cea46b8e3e6285eb6eab843f401343dc1b3f313572f15604120a503b2e2baec6f8ffd795d827943fa0a451f5c18477eeb175cc40ae15673567deaacf4123386a1a6ee3ef395ddb874f9e4fe3f2bbc0f6641dbf0aa2a4e7565ad63373d6b7e33efb8a6ae5d0173456998d4d8a695b0b6a8358d15c7dd046e45f8e6f5c4c2d484d15fe3a6a90d0e207e92cab0be9fc22bbf0cceb44c2d2f8a3de9d45d69363cd2"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) 00:50:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x144) lstat(&(0x7f0000000200)='./file0/../file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) 00:50:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60ff0b892e1d60ed0c8e5946c4864e2aaee4d000000000000ff3fdd475202c1e0f60f786139015962806e37aab4be8f921b"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) [ 3483.089089][T20814] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 00:50:32 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}]) 00:50:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 00:50:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1dc, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf4, 0xc5, "b3d244c41cad7d9fc3dda70c02a82e985285e497f246314c0609fb9dddfc9846cf9e75b58dc5788b158cc3587916cc0cea1cbd996d400f9527e7cb7727b9e9df9468e9ff303f1a2c5922aaa80b536db5708d76a10ec9e44f70c833a0f7f426eb3a8d1e15680512761d2a5c7a8bfb2466eb08f9e3a23a351d9a8eab2b4775a49f84727fcd4e6606fa1cc5f5d82a08dffa846449032ad4cdd395ce14b7836d82b1ea48631b8aebf5e52627b980df34d3db56f89a6db95a16a4bafbc6b70947cc7c20343dd383ef804a70179d535d0a10f0ece3421e4d4ed124218e82e25cc460253e6e46366e6e2f4a3aeca872ac3b86d9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x14, 0xc5, "fa48501ac3420450c528a744c18878d8"}, @NL80211_ATTR_VENDOR_DATA={0xb0, 0xc5, "a012742fff7bc2487b377d1c1cea46b8e3e6285eb6eab843f401343dc1b3f313572f15604120a503b2e2baec6f8ffd795d827943fa0a451f5c18477eeb175cc40ae15673567deaacf4123386a1a6ee3ef395ddb874f9e4fe3f2bbc0f6641dbf0aa2a4e7565ad63373d6b7e33efb8a6ae5d0173456998d4d8a695b0b6a8358d15c7dd046e45f8e6f5c4c2d484d15fe3a6a90d0e207e92cab0be9fc22bbf0cceb44c2d2f8a3de9d45d69363cd2"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 00:50:32 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}]) 00:50:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60ff0b892e1d60ed0c8e5946c4864e2aaee4d000000000000ff3fdd475202c1e0f60f786139015962806e37aab4be8f921b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) 00:50:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x144) r0 = open$dir(&(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) dup2(r0, r1) 00:50:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:33 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x5}]) 00:50:33 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x4, 0x0) 00:50:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/174, 0xae}], 0x5, 0x0, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000180)={{0x0, @addr=0x1}, 0x8, 0x2, 0x51c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:33 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6}]) 00:50:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000080)={{@my=0x0, 0x9d8}, 0x3f, 0x80, 0x0, 0x4, 0x4, 0x7, 0x539b, 0x100000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0xfffffffffffffd65}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:34 executing program 1: pipe(&(0x7f0000001900)={0xffffffffffffffff}) fcntl$lock(r0, 0xb, 0x0) 00:50:34 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}]) 00:50:34 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, 0x0, &(0x7f0000000040)) 00:50:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/174, 0xae}], 0x5, 0x0, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000180)={{0x0, @addr=0x1}, 0x8, 0x2, 0x51c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/174, 0xae}], 0x5, 0x0, 0x1) (async) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000180)={{0x0, @addr=0x1}, 0x8, 0x2, 0x51c}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:50:35 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8}]) 00:50:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:35 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x20280, 0x0) 00:50:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000080)={{@my=0x0, 0x9d8}, 0x3f, 0x80, 0x0, 0x4, 0x4, 0x7, 0x539b, 0x100000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0xfffffffffffffd65}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:35 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9}]) 00:50:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000240), &(0x7f0000000280)=0x4) 00:50:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:36 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10}]) 00:50:36 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffc49, &(0x7f00000004c0)=""/171, 0xbd}, 0x0) 00:50:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/174, 0xae}], 0x5, 0x0, 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000180)={{0x0, @addr=0x1}, 0x8, 0x2, 0x51c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000080)={{@my=0x0, 0x9d8}, 0x3f, 0x80, 0x0, 0x4, 0x4, 0x7, 0x539b, 0x100000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0xfffffffffffffd65}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/124, 0xfffffffffffffd65}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x144) r0 = open$dir(&(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r1 = dup(r0) poll(&(0x7f0000000080)=[{r1, 0x113}, {r0, 0x4}], 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 00:50:36 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x18}]) 00:50:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 00:50:37 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x22}]) 00:50:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/i915', 0x400001, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x1f}}, './file0\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0xff, 0x1000, 0x8000, 0x2040, 0x1, 0x1000, '\x00', 0x0, r2, 0x3, 0x2}, 0x48) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x22, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x400}, @generic={0x8, 0x9, 0x3, 0x4, 0xcb2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000340)='GPL\x00', 0xb1b, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x1a, '\x00', 0x0, 0x24, r2, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x1000}, 0x10, 0x0, r8, 0x0, &(0x7f0000000580)=[r9, r2, r2, r10, r11, r2, 0x1, r12], 0x0, 0x10, 0x4}, 0x90) 00:50:37 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @private=0xa010102}, 0x21, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='wg1\x00', 0x0, 0x7, 0xc94}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/345], 0x208e24b) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0xf695e000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000440)) sendto(r0, &(0x7f00000004c0)="22ee9e3596bdcad23eda0f7dae1d84ff3a3e61c0977975f8bd797d190f7bc6c8efed5b9d5e55bc371a73d9d5b2d4da2c001964a9c1b50c05a6c17265e9b5d17055d080611e6bec71f515a268cb195ab03f585c72f48ea61d06fb344c27a3941844c581bb7de43df63552bed713032099eaa6721a39afb90dce6e575d9832da4e48e9c84501fb7280056d9d4cb578c5b30c7f283d1f8e5ceecdf5be5668bb81c6677ee6a830bd7cf249cffa38d671981f0f4f2f7cddc6b7b116d934aa5136a72b715937e6af81c68841b29ba04d124518d3", 0xd1, 0x4008004, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000740)=""/146, 0x92}], 0x4, &(0x7f0000000dc0)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x415282b3}, &(0x7f0000000800)=0x7654, &(0x7f0000000840)=0x8, 0x200, 0x3, 0x9, 0xae, 0x22, 0xc70f}}, @fadd={0x58, 0x114, 0x6, {{0x7fff, 0x4}, &(0x7f0000000880)=0xae5d, &(0x7f00000008c0)=0x8, 0x6, 0x0, 0x2, 0x5, 0x24, 0x7a550982}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80000001}, @cswp={0x58, 0x114, 0x7, {{0x200, 0x3}, &(0x7f0000000900)=0x2, &(0x7f0000000940)=0x7fffffffffffffff, 0x9, 0x3, 0x9, 0xffffffffffffffff, 0x40, 0x1ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0xff, 0x3}, &(0x7f0000000980)=0xf96, &(0x7f00000009c0)=0x6, 0x4, 0x9, 0xe260, 0x8, 0x3c, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80}, &(0x7f0000000a00)=0x8, &(0x7f0000000a40)=0xd04, 0x3, 0x3, 0x1, 0x8, 0x1, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x81}, {&(0x7f0000000a80)}, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/80, 0x50}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/89, 0x59}, {&(0x7f0000000d00)=""/60, 0x3c}], 0x5, 0x2c, 0x1}}], 0x218, 0x10}, 0x20000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x6}, 0x8) 00:50:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 00:50:38 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2e}]) 00:50:38 executing program 1: syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 00:50:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:38 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 00:50:38 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x30}]) 00:50:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x144) r0 = open$dir(&(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) 00:50:39 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @private=0xa010102}, 0x21, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='wg1\x00', 0x0, 0x7, 0xc94}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/345], 0x208e24b) (async) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async, rerun: 64) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 64) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0xf695e000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000440)) sendto(r0, &(0x7f00000004c0)="22ee9e3596bdcad23eda0f7dae1d84ff3a3e61c0977975f8bd797d190f7bc6c8efed5b9d5e55bc371a73d9d5b2d4da2c001964a9c1b50c05a6c17265e9b5d17055d080611e6bec71f515a268cb195ab03f585c72f48ea61d06fb344c27a3941844c581bb7de43df63552bed713032099eaa6721a39afb90dce6e575d9832da4e48e9c84501fb7280056d9d4cb578c5b30c7f283d1f8e5ceecdf5be5668bb81c6677ee6a830bd7cf249cffa38d671981f0f4f2f7cddc6b7b116d934aa5136a72b715937e6af81c68841b29ba04d124518d3", 0xd1, 0x4008004, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000740)=""/146, 0x92}], 0x4, &(0x7f0000000dc0)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x415282b3}, &(0x7f0000000800)=0x7654, &(0x7f0000000840)=0x8, 0x200, 0x3, 0x9, 0xae, 0x22, 0xc70f}}, @fadd={0x58, 0x114, 0x6, {{0x7fff, 0x4}, &(0x7f0000000880)=0xae5d, &(0x7f00000008c0)=0x8, 0x6, 0x0, 0x2, 0x5, 0x24, 0x7a550982}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80000001}, @cswp={0x58, 0x114, 0x7, {{0x200, 0x3}, &(0x7f0000000900)=0x2, &(0x7f0000000940)=0x7fffffffffffffff, 0x9, 0x3, 0x9, 0xffffffffffffffff, 0x40, 0x1ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0xff, 0x3}, &(0x7f0000000980)=0xf96, &(0x7f00000009c0)=0x6, 0x4, 0x9, 0xe260, 0x8, 0x3c, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80}, &(0x7f0000000a00)=0x8, &(0x7f0000000a40)=0xd04, 0x3, 0x3, 0x1, 0x8, 0x1, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x81}, {&(0x7f0000000a80)}, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/80, 0x50}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/89, 0x59}, {&(0x7f0000000d00)=""/60, 0x3c}], 0x5, 0x2c, 0x1}}], 0x218, 0x10}, 0x20000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x6}, 0x8) 00:50:39 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x204}]) 00:50:39 executing program 1: poll(&(0x7f00000000c0), 0x4c, 0x0) 00:50:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/i915', 0x400001, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x1f}}, './file0\x00'}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0xff, 0x1000, 0x8000, 0x2040, 0x1, 0x1000, '\x00', 0x0, r2, 0x3, 0x2}, 0x48) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x22, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x400}, @generic={0x8, 0x9, 0x3, 0x4, 0xcb2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000340)='GPL\x00', 0xb1b, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x1a, '\x00', 0x0, 0x24, r2, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x1000}, 0x10, 0x0, r8, 0x0, &(0x7f0000000580)=[r9, r2, r2, r10, r11, r2, 0x1, r12], 0x0, 0x10, 0x4}, 0x90) 00:50:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="6ed85c7995da0556201b57091c8629e152757148d1b0ea5ba28947e32eb6fb139af46cd5da21a6e624f105e714573319b17dbd04357d1683f6189a418a3de7992680931f1da7c5d270bde98bb4e2e39918fb446b901dc702f5d517d95ccbc4e7f5", 0x61}, {&(0x7f0000000180)="650f84089804b25e61c81250e557c077010fdd51057ea6ea02c4d4f9d185d4ad31cda0ad1125760092bce84ffa5e84bb", 0x30}], 0x2}, 0x0) 00:50:40 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x300}]) 00:50:40 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @private=0xa010102}, 0x21, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='wg1\x00', 0x0, 0x7, 0xc94}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/345], 0x208e24b) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) mmap(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x0, 0x40010, r4, 0xf695e000) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000440)) sendto(r0, &(0x7f00000004c0)="22ee9e3596bdcad23eda0f7dae1d84ff3a3e61c0977975f8bd797d190f7bc6c8efed5b9d5e55bc371a73d9d5b2d4da2c001964a9c1b50c05a6c17265e9b5d17055d080611e6bec71f515a268cb195ab03f585c72f48ea61d06fb344c27a3941844c581bb7de43df63552bed713032099eaa6721a39afb90dce6e575d9832da4e48e9c84501fb7280056d9d4cb578c5b30c7f283d1f8e5ceecdf5be5668bb81c6677ee6a830bd7cf249cffa38d671981f0f4f2f7cddc6b7b116d934aa5136a72b715937e6af81c68841b29ba04d124518d3", 0xd1, 0x4008004, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000740)=""/146, 0x92}], 0x4, &(0x7f0000000dc0)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x415282b3}, &(0x7f0000000800)=0x7654, &(0x7f0000000840)=0x8, 0x200, 0x3, 0x9, 0xae, 0x22, 0xc70f}}, @fadd={0x58, 0x114, 0x6, {{0x7fff, 0x4}, &(0x7f0000000880)=0xae5d, &(0x7f00000008c0)=0x8, 0x6, 0x0, 0x2, 0x5, 0x24, 0x7a550982}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80000001}, @cswp={0x58, 0x114, 0x7, {{0x200, 0x3}, &(0x7f0000000900)=0x2, &(0x7f0000000940)=0x7fffffffffffffff, 0x9, 0x3, 0x9, 0xffffffffffffffff, 0x40, 0x1ff}}, @mask_cswp={0x58, 0x114, 0x9, {{0xff, 0x3}, &(0x7f0000000980)=0xf96, &(0x7f00000009c0)=0x6, 0x4, 0x9, 0xe260, 0x8, 0x3c, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80}, &(0x7f0000000a00)=0x8, &(0x7f0000000a40)=0xd04, 0x3, 0x3, 0x1, 0x8, 0x1, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x81}, {&(0x7f0000000a80)}, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/80, 0x50}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/89, 0x59}, {&(0x7f0000000d00)=""/60, 0x3c}], 0x5, 0x2c, 0x1}}], 0x218, 0x10}, 0x20000800) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x90) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x6}, 0x8) 00:50:40 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x8) 00:50:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:41 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x402}]) 00:50:41 executing program 1: syz_emit_ethernet(0x1fbf, &(0x7f0000003440)={@broadcast, @local, @val, {@ipv6}}, 0x0) 00:50:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c0298ddb031b41f8cd453a22c02f70ce88e715b9597cf0ac6bbaf65e00"/48], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400640, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x53, 0x7d) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x301, 0x70bd2b, 0x25dfdbfe, {0x1, 0x0, 0x4}, [@typed={0xc, 0x8d, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c015}, 0xc040) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r2}, 0x8) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/69, 0x45}], 0x1, 0x68a, 0x0) 00:50:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/i915', 0x400001, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) r9 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x1f}}, './file0\x00'}) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0xff, 0x1000, 0x8000, 0x2040, 0x1, 0x1000, '\x00', 0x0, r2, 0x3, 0x2}, 0x48) (async, rerun: 64) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x22, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x400}, @generic={0x8, 0x9, 0x3, 0x4, 0xcb2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000340)='GPL\x00', 0xb1b, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x1a, '\x00', 0x0, 0x24, r2, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x1000}, 0x10, 0x0, r8, 0x0, &(0x7f0000000580)=[r9, r2, r2, r10, r11, r2, 0x1, r12], 0x0, 0x10, 0x4}, 0x90) 00:50:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x800, 0x2, 0x1, 0x4, 0x1}, 0x48) 00:50:41 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x406}]) 00:50:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106402, 0x0) 00:50:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9d0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:50:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:42 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x500}]) 00:50:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106408, &(0x7f0000000100)) 00:50:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c0298ddb031b41f8cd453a22c02f70ce88e715b9597cf0ac6bbaf65e00"/48], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400640, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x53, 0x7d) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x301, 0x70bd2b, 0x25dfdbfe, {0x1, 0x0, 0x4}, [@typed={0xc, 0x8d, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c015}, 0xc040) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r2}, 0x8) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/69, 0x45}], 0x1, 0x68a, 0x0) 00:50:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000180)) 00:50:43 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x600}]) 00:50:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9d0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9d0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) 00:50:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}}, 0x0) 00:50:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e326946b9c0298ddb031b41f8cd453a22c02f70ce88e715b9597cf0ac6bbaf65e00"/48], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400640, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x53, 0x7d) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x301, 0x70bd2b, 0x25dfdbfe, {0x1, 0x0, 0x4}, [@typed={0xc, 0x8d, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c015}, 0xc040) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r2}, 0x8) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/69, 0x45}], 0x1, 0x68a, 0x0) 00:50:43 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x604}]) 00:50:44 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$midi(r0, 0x0, 0x0) 00:50:44 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x700}]) 00:50:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=r3) 00:50:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9d0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:50:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x551002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x80, 0x10, 0x3, 0x4, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x64, 0x0, 0x9d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x27, 0x4, [@multicast2, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @multicast1, @broadcast, @multicast1]}, @generic={0x94, 0x10, "64696e009b55a4b7ec946354f892"}, @rr={0x7, 0xb, 0xa4, [@broadcast, @remote]}, @noop]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xb}, {0x10, 0xe}, {0xc, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:45 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x810}]) 00:50:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$'], 0x2c}}, 0x0) 00:50:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x0, 0x40}, 0x48) 00:50:45 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x900}]) 00:50:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e3269463d9e8bca89d9564af60faaee4d000000000000ff3fdd4752090000000f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x40000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x12714, 0x2, 0x1000, 0x2000, &(0x7f0000889000/0x2000)=nil}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x90) 00:50:46 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xe7d}]) 00:50:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x551002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x80, 0x10, 0x3, 0x4, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x64, 0x0, 0x9d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x27, 0x4, [@multicast2, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @multicast1, @broadcast, @multicast1]}, @generic={0x94, 0x10, "64696e009b55a4b7ec946354f892"}, @rr={0x7, 0xb, 0xa4, [@broadcast, @remote]}, @noop]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xb}, {0x10, 0xe}, {0xc, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x400, 0x5, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000340)=@tcp, 0x2}, 0x20) 00:50:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:47 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1008}]) 00:50:47 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x29, 0x4e, 0x0, 0x0) 00:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e3269463d9e8bca89d9564af60faaee4d000000000000ff3fdd4752090000000f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x40000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x12714, 0x2, 0x1000, 0x2000, &(0x7f0000889000/0x2000)=nil}) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x800, 0x71a, 0x1, 0x9, 0x1}, 0x48) 00:50:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x551002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x80, 0x10, 0x3, 0x4, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x64, 0x0, 0x9d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x27, 0x4, [@multicast2, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @multicast1, @broadcast, @multicast1]}, @generic={0x94, 0x10, "64696e009b55a4b7ec946354f892"}, @rr={0x7, 0xb, 0xa4, [@broadcast, @remote]}, @noop]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xb}, {0x10, 0xe}, {0xc, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:47 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1800}]) 00:50:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e3269463d9e8bca89d9564af60faaee4d000000000000ff3fdd4752090000000f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x40000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x12714, 0x2, 0x1000, 0x2000, &(0x7f0000889000/0x2000)=nil}) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:50:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x804, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) 00:50:48 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2000}]) 00:50:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x800, 0x2002, 0x1, 0x0, 0x1}, 0x48) 00:50:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:50:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="6f4e243d853d2650d9ae0bc44564371c80cfc4b0457f6cd4413108fbd75ffd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baa100b05eee66b9800000c00f326635000400000f300f00df66b8857c00000f23d00f21f86635100000050f23f83e3ef2ac660ff32a2e660fc7b00500baf80c66b8ea2d8a8e66efbafc0cb000eebaf80c66b8e802ce8466efbafc0c66ed820c06", 0x61}], 0x1, 0x10, &(0x7f0000000180), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:49 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2200}]) 00:50:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x20, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) 00:50:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680), 0x2}, 0x20) 00:50:49 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2e00}]) 00:50:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:50:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:49 executing program 1: bpf$PROG_LOAD(0x14, &(0x7f0000001340)={0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x8, 0x10, &(0x7f00000011c0), 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000012c0)=[{}, {}, {}, {}, {}]}, 0x2c) 00:50:50 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3000}]) 00:50:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="6f4e243d853d2650d9ae0bc44564371c80cfc4b0457f6cd4413108fbd75ffd"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baa100b05eee66b9800000c00f326635000400000f300f00df66b8857c00000f23d00f21f86635100000050f23f83e3ef2ac660ff32a2e660fc7b00500baf80c66b8ea2d8a8e66efbafc0cb000eebaf80c66b8e802ce8466efbafc0c66ed820c06", 0x61}], 0x1, 0x10, &(0x7f0000000180), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x89a0, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @random="c644261d9046"}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 00:50:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d0000000000000040dd475202c1e0f60f7864a852ffcb92aec2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:50:50 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3f00}]) 00:50:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x48) 00:50:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="6f4e243d853d2650d9ae0bc44564371c80cfc4b0457f6cd4413108fbd75ffd"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="baa100b05eee66b9800000c00f326635000400000f300f00df66b8857c00000f23d00f21f86635100000050f23f83e3ef2ac660ff32a2e660fc7b00500baf80c66b8ea2d8a8e66efbafc0cb000eebaf80c66b8e802ce8466efbafc0c66ed820c06", 0x61}], 0x1, 0x10, &(0x7f0000000180), 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:51 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000}]) 00:50:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 00:50:51 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x7ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000001}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:50:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000300000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="66f20f21b5646667f08141b93f7500006436360f01d1dad6d3edf30fc777f20f01cf394b0566b8070000000f23d00f21f86635200000020f23f826d8e6", 0x3d}], 0x1, 0x1, &(0x7f00000001c0)=[@cr4={0x1, 0x4001}, @dstype3={0x7, 0xa}], 0x2) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d40000000475202c1e0f60f78469d9cb2e57f0a7c57e9a77bdf7145efc242bffb8e5ad1989d25812e593e0304798fdcf5770da9c79efb944ce155f25aa60e41feea9fae45ad10ac5c909e1cecbfa6447461e11c0100533d6babf5f1e074a9d44300"/134], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) poll(&(0x7f00000002c0)=[{r0, 0x6100}, {r1, 0x100}, {r3, 0x5aa}, {r4, 0xa0}, {r1, 0x1090}], 0x5, 0x8) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:50:51 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x2, 0x2, {0x0, @multicast2}}, 0x1e) 00:50:52 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x401f}]) 00:50:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x48) 00:50:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000440)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 00:50:52 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x60ff}]) 00:50:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket(0x10, 0xa, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a31d3f549950ddbcda1957a6ffe28764edb084944e2a4242e11302d397dc55b4d07ac488c6eaa1a9eb923eb35fab9573708d34a941a5b7c2404585972ed828a42b5a32a58f6addb14fa2c3b75ec27995e946e44a3013e55fb979f6c2464963677356c6f5946098fa285e254ca6d6fc4210cb348069cf1e62b4d43f91b631ffe7467632011b5b5da5d34011922e2844e5702787c11435846b4899c733da0ce8b58c1b702cc08e7ac74c995d351e9f8e19f59add39530d1"], 0xb9) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="0100ad810100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff000000002e2f66696c653000"]) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000002c0)={@remote, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@bridge_delvlan={0x70, 0x71, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}]}, 0x70}}, 0x4000) mmap(&(0x7f00006e3000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, r5, 0x2069000) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = syz_open_dev$video4linux(&(0x7f0000000540), 0x100000000, 0x10801) poll(&(0x7f0000000580)=[{r4, 0x108}, {r9, 0x1100}, {r3, 0x400}, {r5, 0x600c}], 0x4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x1c}], 0x1c}, 0x0) 00:50:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000300000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="66f20f21b5646667f08141b93f7500006436360f01d1dad6d3edf30fc777f20f01cf394b0566b8070000000f23d00f21f86635200000020f23f826d8e6", 0x3d}], 0x1, 0x1, &(0x7f00000001c0)=[@cr4={0x1, 0x4001}, @dstype3={0x7, 0xa}], 0x2) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000300000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="66f20f21b5646667f08141b93f7500006436360f01d1dad6d3edf30fc777f20f01cf394b0566b8070000000f23d00f21f86635200000020f23f826d8e6", 0x3d}], 0x1, 0x1, &(0x7f00000001c0)=[@cr4={0x1, 0x4001}, @dstype3={0x7, 0xa}], 0x2) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d40000000475202c1e0f60f78469d9cb2e57f0a7c57e9a77bdf7145efc242bffb8e5ad1989d25812e593e0304798fdcf5770da9c79efb944ce155f25aa60e41feea9fae45ad10ac5c909e1cecbfa6447461e11c0100533d6babf5f1e074a9d44300"/134], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket(0x2b, 0x1, 0x0) (async) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) poll(&(0x7f00000002c0)=[{r0, 0x6100}, {r1, 0x100}, {r3, 0x5aa}, {r4, 0xa0}, {r1, 0x1090}], 0x5, 0x8) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:50:53 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7d0e}]) 00:50:53 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000001700)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:50:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000001740), &(0x7f0000001780)=0x8) 00:50:53 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x80000}]) 00:50:53 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) bind(r0, &(0x7f0000001700)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:50:54 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000440)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 00:50:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket(0x10, 0xa, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a31d3f549950ddbcda1957a6ffe28764edb084944e2a4242e11302d397dc55b4d07ac488c6eaa1a9eb923eb35fab9573708d34a941a5b7c2404585972ed828a42b5a32a58f6addb14fa2c3b75ec27995e946e44a3013e55fb979f6c2464963677356c6f5946098fa285e254ca6d6fc4210cb348069cf1e62b4d43f91b631ffe7467632011b5b5da5d34011922e2844e5702787c11435846b4899c733da0ce8b58c1b702cc08e7ac74c995d351e9f8e19f59add39530d1"], 0xb9) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) fcntl$dupfd(r4, 0x406, r5) (async) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="0100ad810100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff000000002e2f66696c653000"]) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000002c0)={@remote, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@bridge_delvlan={0x70, 0x71, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}]}, 0x70}}, 0x4000) mmap(&(0x7f00006e3000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, r5, 0x2069000) (async) mmap(&(0x7f00006e3000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, r5, 0x2069000) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = syz_open_dev$video4linux(&(0x7f0000000540), 0x100000000, 0x10801) poll(&(0x7f0000000580)=[{r4, 0x108}, {r9, 0x1100}, {r3, 0x400}, {r5, 0x600c}], 0x4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000300000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="66f20f21b5646667f08141b93f7500006436360f01d1dad6d3edf30fc777f20f01cf394b0566b8070000000f23d00f21f86635200000020f23f826d8e6", 0x3d}], 0x1, 0x1, &(0x7f00000001c0)=[@cr4={0x1, 0x4001}, @dstype3={0x7, 0xa}], 0x2) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d40000000475202c1e0f60f78469d9cb2e57f0a7c57e9a77bdf7145efc242bffb8e5ad1989d25812e593e0304798fdcf5770da9c79efb944ce155f25aa60e41feea9fae45ad10ac5c909e1cecbfa6447461e11c0100533d6babf5f1e074a9d44300"/134], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket(0x2b, 0x1, 0x0) (async) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) poll(&(0x7f00000002c0)=[{r0, 0x6100}, {r1, 0x100}, {r3, 0x5aa}, {r4, 0xa0}, {r1, 0x1090}], 0x5, 0x8) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:50:54 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x100000}]) 00:50:54 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) 00:50:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='j', 0x1, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 00:50:55 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x200000}]) 00:50:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (rerun: 64) r5 = socket(0x10, 0xa, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="73797a31d3f549950ddbcda1957a6ffe28764edb084944e2a4242e11302d397dc55b4d07ac488c6eaa1a9eb923eb35fab9573708d34a941a5b7c2404585972ed828a42b5a32a58f6addb14fa2c3b75ec27995e946e44a3013e55fb979f6c2464963677356c6f5946098fa285e254ca6d6fc4210cb348069cf1e62b4d43f91b631ffe7467632011b5b5da5d34011922e2844e5702787c11435846b4899c733da0ce8b58c1b702cc08e7ac74c995d351e9f8e19f59add39530d1"], 0xb9) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="0100ad810100000018000000", @ANYRES32=r0, @ANYBLOB="feffffff000000002e2f66696c653000"]) (async) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000002c0)={@remote, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@bridge_delvlan={0x70, 0x71, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}]}, 0x70}}, 0x4000) (async, rerun: 64) mmap(&(0x7f00006e3000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, r5, 0x2069000) (async, rerun: 64) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = syz_open_dev$video4linux(&(0x7f0000000540), 0x100000000, 0x10801) poll(&(0x7f0000000580)=[{r4, 0x108}, {r9, 0x1100}, {r3, 0x400}, {r5, 0x600c}], 0x4, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:50:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 00:50:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = dup2(r2, r0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r6}) connect$packet(r4, &(0x7f0000000380)={0x11, 0x10, r6, 0x1, 0x9, 0x6, @random="5fa21f8823c0"}, 0x14) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f01cb66b8020000000f23d00f21f86635300000050f23f80ef0ff48ac66838b0030000f01cb0fc798630664d9f7c0a3ff7f00640f01cb", 0x37}], 0x1, 0x68, &(0x7f0000000200), 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000200)={0x20, r1}) sendmsg$rds(r8, &(0x7f0000001680)={&(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000001600)=[@fadd={0x58, 0x114, 0x6, {{0x918, 0x81}, &(0x7f0000001540)=0xffff, &(0x7f0000001580)=0x3f, 0xffffffffffffffff, 0x80000001, 0x1, 0x8000, 0x50, 0x3}}], 0x58, 0x2000000}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000967000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b8f43a7b8e66efbafc0ced640fc7230f01d10f785418baf80c66b896faf78466efbafc0cb80e00ef0f00d2660f388083008066b9800000c00f326635002000000f30f7530f66b99d0300000f32", 0x51}], 0x1, 0x5, &(0x7f0000000340)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x13}, @dstype3={0x7, 0x6}], 0x2) 00:50:56 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1000000}]) 00:50:56 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x1000, 0x4) 00:50:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e4d6946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c5e0f60f050075e4c296556208c4c2b6ffc579a1a884d351eb2f30cdf303885d1a71ea71997fda0e256e63992e355381714578c8aaf4"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:56 executing program 1: r0 = socket(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 00:50:56 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2000000}]) 00:50:57 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, &(0x7f0000000780), &(0x7f00000007c0)=0xc) 00:50:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:57 executing program 4: pipe2(&(0x7f0000001b80), 0x0) 00:50:57 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2040000}]) 00:50:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = dup2(r2, r0) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r6}) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r6}) connect$packet(r4, &(0x7f0000000380)={0x11, 0x10, r6, 0x1, 0x9, 0x6, @random="5fa21f8823c0"}, 0x14) (async) connect$packet(r4, &(0x7f0000000380)={0x11, 0x10, r6, 0x1, 0x9, 0x6, @random="5fa21f8823c0"}, 0x14) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f01cb66b8020000000f23d00f21f86635300000050f23f80ef0ff48ac66838b0030000f01cb0fc798630664d9f7c0a3ff7f00640f01cb", 0x37}], 0x1, 0x68, &(0x7f0000000200), 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000200)={0x20, r1}) sendmsg$rds(r8, &(0x7f0000001680)={&(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000001600)=[@fadd={0x58, 0x114, 0x6, {{0x918, 0x81}, &(0x7f0000001540)=0xffff, &(0x7f0000001580)=0x3f, 0xffffffffffffffff, 0x80000001, 0x1, 0x8000, 0x50, 0x3}}], 0x58, 0x2000000}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000967000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b8f43a7b8e66efbafc0ced640fc7230f01d10f785418baf80c66b896faf78466efbafc0cb80e00ef0f00d2660f388083008066b9800000c00f326635002000000f30f7530f66b99d0300000f32", 0x51}], 0x1, 0x5, &(0x7f0000000340)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x13}, @dstype3={0x7, 0x6}], 0x2) 00:50:57 executing program 4: fchmodat(0xffffffffffffffff, &(0x7f00000018c0)='./file0\x00', 0x0) 00:50:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e4d6946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c5e0f60f050075e4c296556208c4c2b6ffc579a1a884d351eb2f30cdf303885d1a71ea71997fda0e256e63992e355381714578c8aaf4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:58 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3000000}]) 00:50:58 executing program 1: fchownat(0xffffffffffffffff, &(0x7f0000002480)='./file0\x00', 0x0, 0x0, 0x0) 00:50:58 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x1c, 0x1c, 0x3}, 0x1c) 00:50:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='j', 0x1, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000440)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 00:50:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) r3 = dup2(r2, r0) (async) r4 = socket(0x2b, 0x1, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r6}) (async) connect$packet(r4, &(0x7f0000000380)={0x11, 0x10, r6, 0x1, 0x9, 0x6, @random="5fa21f8823c0"}, 0x14) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f01cb66b8020000000f23d00f21f86635300000050f23f80ef0ff48ac66838b0030000f01cb0fc798630664d9f7c0a3ff7f00640f01cb", 0x37}], 0x1, 0x68, &(0x7f0000000200), 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000200)={0x20, r1}) sendmsg$rds(r8, &(0x7f0000001680)={&(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000001600)=[@fadd={0x58, 0x114, 0x6, {{0x918, 0x81}, &(0x7f0000001540)=0xffff, &(0x7f0000001580)=0x3f, 0xffffffffffffffff, 0x80000001, 0x1, 0x8000, 0x50, 0x3}}], 0x58, 0x2000000}, 0x0) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000967000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b8f43a7b8e66efbafc0ced640fc7230f01d10f785418baf80c66b896faf78466efbafc0cb80e00ef0f00d2660f388083008066b9800000c00f326635002000000f30f7530f66b99d0300000f32", 0x51}], 0x1, 0x5, &(0x7f0000000340)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x13}, @dstype3={0x7, 0x6}], 0x2) 00:50:58 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3e7ffff}]) 00:50:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="9e4d6946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c5e0f60f050075e4c296556208c4c2b6ffc579a1a884d351eb2f30cdf303885d1a71ea71997fda0e256e63992e355381714578c8aaf4"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:59 executing program 4: bpf$MAP_CREATE_RINGBUF(0x11, &(0x7f0000009800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:50:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:50:59 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000000)=@ccm_128={{}, "7e777c0fb3055b4e", "d9430ead9e74f374b474b3d43787c688", "5b1dd661", "f92682b75f658b50"}, 0x28) 00:50:59 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000000)=@ccm_128={{}, "7e777c0fb3055b4e", "d9430ead9e74f374b474b3d43787c688", "5b1dd661", "f92682b75f658b50"}, 0x28) 00:50:59 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000000}]) 00:50:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x6000, 0x2000}) 00:50:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c029ff3fdd475202c1e0f60f78000000000000000000000000000000005016113a65f0ea52ecd5555e7fd871f7ecb0cdc333287573017f6301a10d2937cd003352d6d878006b741f973e5808d3784bedf6ad6e9af38b9679"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb8e, 0x80}}, './file0\x00'}) r6 = gettid() tkill(r6, 0x1000000000016) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x185840, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x16, 0x0, @val=@iter={&(0x7f0000000200)=@task={r6, 0xffffffffffffffff, r7}, 0x10}}, 0x40) 00:51:00 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x6, &(0x7f0000000580)={{}, &(0x7f0000000500), 0x0}, 0x20) 00:51:00 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000006c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000740)) 00:51:00 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x5000000}]) 00:51:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 00:51:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x800, 0x2, 0x1, 0x9, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) 00:51:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x6000, 0x2000}) 00:51:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x801c581f, 0x0) 00:51:01 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6000000}]) 00:51:01 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) 00:51:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8950829d8a701b170000008f9800000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x90) 00:51:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c029ff3fdd475202c1e0f60f78000000000000000000000000000000005016113a65f0ea52ecd5555e7fd871f7ecb0cdc333287573017f6301a10d2937cd003352d6d878006b741f973e5808d3784bedf6ad6e9af38b9679"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb8e, 0x80}}, './file0\x00'}) (async) r6 = gettid() tkill(r6, 0x1000000000016) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x185840, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x16, 0x0, @val=@iter={&(0x7f0000000200)=@task={r6, 0xffffffffffffffff, r7}, 0x10}}, 0x40) 00:51:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:03 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x6040000}]) 00:51:03 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 00:51:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x800, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f00000008c0), &(0x7f0000000900)=@tcp, 0x2}, 0x20) 00:51:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x6000, 0x2000}) 00:51:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x800, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%p \x00'}, 0x20) 00:51:03 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280), 0xcd8e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0305710, 0x0) 00:51:03 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7000000}]) 00:51:04 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x0, 0x8}, 0xc) 00:51:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x800, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f00000006c0)={{r0}, 0x0, 0x0}, 0x20) 00:51:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c029ff3fdd475202c1e0f60f78000000000000000000000000000000005016113a65f0ea52ecd5555e7fd871f7ecb0cdc333287573017f6301a10d2937cd003352d6d878006b741f973e5808d3784bedf6ad6e9af38b9679"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb8e, 0x80}}, './file0\x00'}) r6 = gettid() tkill(r6, 0x1000000000016) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x185840, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x16, 0x0, @val=@iter={&(0x7f0000000200)=@task={r6, 0xffffffffffffffff, r7}, 0x10}}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="9e326946b9c029ff3fdd475202c1e0f60f78000000000000000000000000000000005016113a65f0ea52ecd5555e7fd871f7ecb0cdc333287573017f6301a10d2937cd003352d6d878006b741f973e5808d3784bedf6ad6e9af38b9679"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb8e, 0x80}}, './file0\x00'}) (async) gettid() (async) tkill(r6, 0x1000000000016) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x185840, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x16, 0x0, @val=@iter={&(0x7f0000000200)=@task={r6, 0xffffffffffffffff, r7}, 0x10}}, 0x40) (async) 00:51:04 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8000000}]) 00:51:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) sendmsg$rds(r1, &(0x7f0000004140)={&(0x7f0000003980)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000003cc0)=""/71, 0x47}, {&(0x7f0000003d40)=""/233, 0xe9}, {&(0x7f0000003e40)=""/161, 0xa1}, {&(0x7f0000003f00)=""/171, 0xab}, {&(0x7f0000003fc0)=""/243, 0xf3}], 0x5, 0x0, 0x0, 0x40000}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) fcntl$setown(r1, 0x8, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x5e, 0x81, 0x1, 0x20, @loopback, @loopback, 0x20, 0x40, 0x8, 0x63}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'gre0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)="9140ca824b93d0ed296ed67dc30a24f98ee30702980f56213bb376f8a8693a38212ab73002bf67908d1a64f14792c3c774db44ace2c482705bbcb2a445d24fbdfbd60b69115f0f612cc7095bf2c82675f137dc7a4803ed2e05d65036a3", 0x5d}, {&(0x7f00000002c0)="01d738fcc9c41a4b723c010b06906b5594e3e315c08adaf13c99ee24ae72067e0ba721a105f2cb01e29bb9993d00072a145744c69d258a25a58173c866940f0848c3791691aa55e0a7c2dd6458b0c886f9ae52a07338c82290bca0a1b562ecbc2769fbe3533658809b8047b84bb6f041f7900ae77f05e576f5ade7adc378436120d9f55be0eda6df492446e98f46e28ab56a6d2bc30ac07de549ea35d639d7683689c37aae9384", 0xa7}, {&(0x7f0000000380)="2faa22e54c482cd275f91fc667a9f4375e51afbe1b0f8bb41943f12b232feb96e0a10eeb9a0df60068c717e3edfd51f0a093796ede41a2767d0030f567db6c43deedb03c159319877cdb174feb8f135aa012161b60db3faa1c6d9f7ff9a88797c7ef8a4f4653f7a7e0b4a5bbd16eb47acf5a13", 0x73}, {&(0x7f0000000440)="a95bac02de9d0e95d355cff14b09812136a689d6b4ee4442f1a434c9578cbfb31deea086e958405ca9bbbf2ce61b4975f55e570666274cbf5a71d00bfff60d10bb50306e49c028ced1f6ed96268c78f21730ff9410800327bf08b755d57960f2dc51df6f", 0x64}, {&(0x7f00000004c0)="a5d6f34843adffe40fd2a581cbbd72d171bec9827c83a55f0ee80225fc025b5cdcb33223987add4d256dc1efd93753decc3d09a3db6e16ac3fcd1c80eefb5632518e22eec73de8f2aadbf96ce5297d9f886441a0af9cffed1a2bf3f9b0e069f9bc1de1ef830c3b", 0x67}, {&(0x7f0000000540)="a5fafd0ea246c9eb7477ff4c9299a6d3e30ac76ee73d14fdead7641c3a14eebe47adb47df6a035", 0x27}], 0x6, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "d771"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast2}}}], 0x68}}, {{&(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000780)="a1f456dca3744920187c9430920d2649bbafd8bc072dd24bbb1275125379349b2eda2c4b2b59bc3ba29835cb7eed9853d3d8fa6699758f69a442108fd47a4c84c2ef915e58a3cfd80300f3e1cc27fe75cfb13f804a1284d1554dd2d05de9acab2a30f57e8aa384981ebcbaa0e6de050716c5bde3a48a21eb", 0x78}, {&(0x7f0000000800)="926ecf3c1b1e9ae599dbc67949dd298dd691314c5c3b8723384aa0a3d88b9edfa0258ccc3c9f9e5bf3d27e68e677efc6620a9e4e2aade585cb1813dfbdee38832e3c7bad3173aa51d92ee104741e26ea205463cbaa0d1742f259425b0767096883800fddfbe97bb268dbbbf22de200dc9cf02739cbb690808fcff5fda0a1438e08ba85b937b266a58a4f422a230e86f2ca", 0x91}, {&(0x7f00000008c0)="f642f981158fc063eaa701d5d58c3bc8e676a2cb2132fd8b2a52223ac1d2aeea04a72dd03a5ce7a9edaaec585d9950e385eafa647258b1a58efdb4c313b7938204d99768f25134f4ae47a96d5b87a31a47b97cb124901cb7059c13c0a4421bb22e27add6558c73a5a9952118167c9911289f90a30a09124c10c457fd6f5facd8e0f68db191d8a8e2fa37d9", 0x8b}], 0x3, &(0x7f0000004180)=ANY=[@ANYBLOB="14000000000000000000ee270000000000003800000000000000000000000700000083271000000000ac1414bbac1e00010aaa79ffffe000000100000000001400000000000000000000000100000003000000000000009bbb56b9b15f8e9f2d3876b361ca0190dfba25d530e2923ee6ecf0cef44d5609a998e37e5be266c3696625"], 0x68}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000a80)="e4ff09b9dc0d6d6a424039d0596aca10570d29fa7941a5e2a367f1f80ee3052e68a49d720d0cb44c76006c08488439bd444a423c296f8b1dd47783c57bbacdd231d95c1bc036b949972b8e6c7f2be64b1ca3ad7fce0a67db43981cdc50860fdea4110ac10011fe20f3276ff6f2e97792849146fa7a0b24f82f730b679a550c2adbd9ff68adedd6f69138b951626873181225141d76b7e00954f902ae49ae4842caec960315ede5019af73c7f987bf053d5e6d1e9ac319bd088ec0934", 0xbc}, {&(0x7f0000000b40)="fa2bba4ce7269522ec62faba2767f7f05d90857968d536f89de0ba28eb9195901e51f83f9e242f95046b9ec565852bd8834c8f499934430ec0165918b0f94ba138ca639f5882ae882b32629cf884f114a69c8525958618ad0cc63512b73940e2bad6b917c749a4ef8a686f7f04d8ccd23eb296e119203e7f5e9d4f2f4e0dbca260a7649ea507d47da260c7d1c6218222d63bb55a6bf9bb1f35fbff074a5ead0de628b993d5b999c1f75bd26711daf028536dadcb907b38c465c67e77b22015f8fd844fb0bb85704d1e794503ccca84fc0effb1663b30946379c1b36ab6dc8cba9552d3f7c207", 0xe6}, {&(0x7f0000000c40)="d98f55e9583659349b2785e6e79b", 0xe}, {&(0x7f0000000c80)="0d4fee252679a517e99e646cb00a32387a3d3e2956c88f688641ef026d4e9f9d878ad7df6d94031e34c7951b045da67436479b913b2ab1366874d9b04cce26a775a8d8b195f02f80bbeef57215399b71a731c193f4837ab78a8abfacbcd1029b4845c29395", 0x65}, {&(0x7f0000000d00)="1baeaf63f303e8aa0f420f299bd7391396d83f468752aaac43d3bfbdb287cf187d8e0908456f409c87cf30121bf92f6ecf9af0f2abe3a7f4b7a8e94f293e06d5446e36796726627535d061b529bd65f351b40d175e7c645f4dcb76f5df1f90f70a20d89c2f843a663386bf3659d23c48c78bda2a118e2296fd0b7e8798572de75ccc2671eaddfba4501feae1c2d8d7390053c6cc6e57a2a6f56ba5706714fd45a5e986f8e6bccb07d50341d89cb9fe375ee3187091a83aa644e1d8933680a46967efef", 0xc3}, {&(0x7f0000000e00)="e0d856d8ec405285a62932513e4cfb0db29f76e4904ad97ef49dcc6b8ac6954e691de4f54154a2e9c51652a59b260de5c2887bdcd94279eeae350471b054cfa834fc5670acb983f33f4f3c8383e55c91e4a3d2fbd4a5b9b928315235fc6edc8bbd4872", 0x63}], 0x6, &(0x7f0000000f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x48}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="64d0da8cfadaf44f2673ec9788ed09a197e3931f0b19fdb206e9e4d4df51a342c71dd227d82340171c8e218a9581937cd9ba7aa1e76c93aea8b4efe967c32c01a96e92e341c8c6e1911fd9fbac9a7e97efa90091ccd50c5f8e66b2750d07459698ba82ab113664bebc4b82497e872457d09a3d4de8196989beaf2280aa11ac5c8f448055d0a31f8441522493430cb479fbe8d87921f559b9ac0ae741f5603dc7a40d191c22b353259e74b3766dd21a68cd4801aeb4b6124b31401e3dc5b9052f0a09563577f4741da36e46bb862d4f194d86117416d29e884303", 0xda}, {&(0x7f00000010c0)="6e8c10cf6bf090a62ce5493d023333f04a5aeedbc5b78e4d5889d985b2762ccb76cbbdff2f0c4d1dced3d9707d725e4f5342c2892e94f53aaa3ee8520f1dfbd99816a478d1f62af74a5f8504b09528a79e0e56c996364fb6e22c85865c2aa95ac694af750928493cd85f3e914fa9a69250125640b044d75178412d07f3950ecb0d50a755559c5245daed6adcf3c5004084fc25b629b28ccbead29443f6b1b5d03ebe7d2a0de205d9c2447a17e0451f8b299844b4bd2cdd22f6150a613cf775b32dee7751d321d9cde7c1c7104eb0dcad9bd0a4dca253bf06a9ac39e16a7c8979afaab721cc7f5f92cc26", 0xea}, {&(0x7f0000001600)="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", 0x1000}], 0x3, &(0x7f0000001200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xe8}}, {{&(0x7f0000001300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000001340)="6aea8bd971d84178d68cb252ad3adc34f534afcb2e304b00c5b08999a77660c16aa2167428031e56d6ed88c38cab0d985b6997cfabc35eda2985dac7ed3c5198e0e7c7892b16995d08763ac3b63eba93970850b3de207784a7f640b1b365778fa3973a167fe68ccee80cecdc2f582ac91eda492363c9f439093f5401bc351fe9b94ad40d0ebc84fef1ec7eb7d61267c1106328a09d97f915c82c33822f10907731d4a03088056232eb6a63fcc37951c84c9ff06ddf01a57ddc12395db2093232bd6ffacf571c1bfcf881fe7bffdc1ec31a437b0fb30ad733161cb6bae478587f", 0xe0}, {&(0x7f0000001440)="84bd1a638104643d2cc3aa062f7ff5e36cc081b940999d93469974fcc81128707f668e061d350c7852eb5bae5c7c3c711fb195a661278234db8a281c4245effa0af1b71324848420b2cd20fd93439899d9d473cccbb46eaa55347318e8ea7c44022964af6a56e50986998d2e0c490fd6fc07dc1350bcefb9d6e048cf3f390da850967bd4c3a151c65bdaeb73daea94cd2aec409c", 0x94}, {&(0x7f0000001500)="799ddd4c2fa518291b20a100", 0xc}, {&(0x7f0000002600)="efb4e719a31b74d517f956cffdcd4407d13eaa69553b9cb59be2eeb9cd234982dd807ef8c3c476624126c08fcfc1498fd5638771b090b72213e8e02806dfd018346c1688b39e9ec0b9f2f08180e7221bf745f400269d948c1bce1c40d3a341b6993cee39eb674d746c30a6cbe0b0ce0ee3d37916a6a73eee7ec52f83f6293eeda20c76e593632197daa38373cab0656ee354f34eb38f9c8470c9823c2493841ea5faa837c43e1e91df03759c447cd40ad38536b8c15267924b488a5ff90313e71110096fc7e1b1eae861df6941932f8f6e35888ee26d99f6d4e9", 0xda}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="ef6d1af0dc59009d0b139edd83d22a80cf9920c000d6ab1f693430696be7988c044696172124fda5cf9bb9a620c24e63e4085050d5a95f017df4f785a851882fafbdd06fecbbd23dd768f60ec6a05adf35dcec3a0ae15396f4fb4f2d5627db1d41b6958e7938c23041119a3b5ae29d1c1f83a08dc2bc2ea57d68da55a654ca6d394ff6ff784b7417daa0fc7107a16e", 0x8f}, {&(0x7f0000001540)="d2b0abd73180a3b0761c20fdcbe78248150141607c7cead2378ef8fe5e8677f806925ddee6e8e835efb409b596a9adad0a2ddb528fae7ebd36fd107476d5be560627454a292e0224a1ba7b9ea6ca82a51affcf8c643b18f9e59fb44cf71d02060589b03a4b3d74052be9940fb8446a83e385fad76514a687", 0x78}, {&(0x7f00000037c0)="3159909809bb06da66778b8ac12c4a9c93817b7d32bc0f3c3f6301816b192e7f41b63c8d1708544b86872b5d27e8076b4c6b24cdb354d4c635c2216d9fd4738400515eb31ee1d81af0832d468818cb4024a90fdf369048be9c64d76e24d9e10d6fe63cc7b1bc85abacd940ba1019afe1343e693fa8c1776c0a5588b26c81429890842d66042534239559b8c5b14fba1b18e588d9fc29df5d75a2d1562be3", 0x9e}, {&(0x7f0000003880)="2399383a5ff8a41b4ece1828b05bc56023f62fb37ff6c871b801cbbaf342c35b0e961ce9b78e2cc5820ba295eba4ce1a64e2c4fdba44721b0e7c35c2014d22d4ca53a6557850e211b45b00e8ba636c7a18e6b4a7d877abfa5acfd370cb7a4be89038e1c2f3a1bda78aeb61e56de66b9104135ffe53d489fcfb3981b0e7bc9c5cbf7c957adef30c5fffc0360494c04759d03edca18ff2881fe42e15f623084ccf8dd9e1faac530c1295e235efbedebf158f40ccce0ebe321a8d8e40e5669b9d6aa4", 0xc1}, {&(0x7f0000003980)}], 0xa, &(0x7f0000003ac0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x66, [@multicast1, @loopback]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @broadcast}}}], 0xb0}}], 0x5, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:51:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1}) 00:51:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x800, 0x2, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f00000006c0)={{r0}, 0x0, 0x0}, 0x20) 00:51:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast2}}}, 0x88) 00:51:05 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x8100000}]) 00:51:05 executing program 1: r0 = epoll_create(0x296c) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 00:51:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:05 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f00000020c0)={0x28, 0xffffffffffffffda, r1}, 0x28) 00:51:05 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 00:51:05 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9000000}]) 00:51:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x1, 0x3, 0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:07 executing program 4: r0 = syz_io_uring_setup(0x45c2, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001840)='/sys/class/mac80211_hwsim', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, 0xffffffffffffffff], 0x2) 00:51:07 executing program 1: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f0000001500)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x19, 0x0, 0x0) 00:51:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:07 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10000000}]) 00:51:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket(0x2b, 0x1, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) (async) sendmsg$rds(r1, &(0x7f0000004140)={&(0x7f0000003980)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000003cc0)=""/71, 0x47}, {&(0x7f0000003d40)=""/233, 0xe9}, {&(0x7f0000003e40)=""/161, 0xa1}, {&(0x7f0000003f00)=""/171, 0xab}, {&(0x7f0000003fc0)=""/243, 0xf3}], 0x5, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = gettid() tkill(r2, 0x1000000000016) (async) fcntl$setown(r1, 0x8, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x5e, 0x81, 0x1, 0x20, @loopback, @loopback, 0x20, 0x40, 0x8, 0x63}}) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r8}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'gre0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)="9140ca824b93d0ed296ed67dc30a24f98ee30702980f56213bb376f8a8693a38212ab73002bf67908d1a64f14792c3c774db44ace2c482705bbcb2a445d24fbdfbd60b69115f0f612cc7095bf2c82675f137dc7a4803ed2e05d65036a3", 0x5d}, {&(0x7f00000002c0)="01d738fcc9c41a4b723c010b06906b5594e3e315c08adaf13c99ee24ae72067e0ba721a105f2cb01e29bb9993d00072a145744c69d258a25a58173c866940f0848c3791691aa55e0a7c2dd6458b0c886f9ae52a07338c82290bca0a1b562ecbc2769fbe3533658809b8047b84bb6f041f7900ae77f05e576f5ade7adc378436120d9f55be0eda6df492446e98f46e28ab56a6d2bc30ac07de549ea35d639d7683689c37aae9384", 0xa7}, {&(0x7f0000000380)="2faa22e54c482cd275f91fc667a9f4375e51afbe1b0f8bb41943f12b232feb96e0a10eeb9a0df60068c717e3edfd51f0a093796ede41a2767d0030f567db6c43deedb03c159319877cdb174feb8f135aa012161b60db3faa1c6d9f7ff9a88797c7ef8a4f4653f7a7e0b4a5bbd16eb47acf5a13", 0x73}, {&(0x7f0000000440)="a95bac02de9d0e95d355cff14b09812136a689d6b4ee4442f1a434c9578cbfb31deea086e958405ca9bbbf2ce61b4975f55e570666274cbf5a71d00bfff60d10bb50306e49c028ced1f6ed96268c78f21730ff9410800327bf08b755d57960f2dc51df6f", 0x64}, {&(0x7f00000004c0)="a5d6f34843adffe40fd2a581cbbd72d171bec9827c83a55f0ee80225fc025b5cdcb33223987add4d256dc1efd93753decc3d09a3db6e16ac3fcd1c80eefb5632518e22eec73de8f2aadbf96ce5297d9f886441a0af9cffed1a2bf3f9b0e069f9bc1de1ef830c3b", 0x67}, {&(0x7f0000000540)="a5fafd0ea246c9eb7477ff4c9299a6d3e30ac76ee73d14fdead7641c3a14eebe47adb47df6a035", 0x27}], 0x6, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "d771"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast2}}}], 0x68}}, {{&(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000780)="a1f456dca3744920187c9430920d2649bbafd8bc072dd24bbb1275125379349b2eda2c4b2b59bc3ba29835cb7eed9853d3d8fa6699758f69a442108fd47a4c84c2ef915e58a3cfd80300f3e1cc27fe75cfb13f804a1284d1554dd2d05de9acab2a30f57e8aa384981ebcbaa0e6de050716c5bde3a48a21eb", 0x78}, {&(0x7f0000000800)="926ecf3c1b1e9ae599dbc67949dd298dd691314c5c3b8723384aa0a3d88b9edfa0258ccc3c9f9e5bf3d27e68e677efc6620a9e4e2aade585cb1813dfbdee38832e3c7bad3173aa51d92ee104741e26ea205463cbaa0d1742f259425b0767096883800fddfbe97bb268dbbbf22de200dc9cf02739cbb690808fcff5fda0a1438e08ba85b937b266a58a4f422a230e86f2ca", 0x91}, {&(0x7f00000008c0)="f642f981158fc063eaa701d5d58c3bc8e676a2cb2132fd8b2a52223ac1d2aeea04a72dd03a5ce7a9edaaec585d9950e385eafa647258b1a58efdb4c313b7938204d99768f25134f4ae47a96d5b87a31a47b97cb124901cb7059c13c0a4421bb22e27add6558c73a5a9952118167c9911289f90a30a09124c10c457fd6f5facd8e0f68db191d8a8e2fa37d9", 0x8b}], 0x3, &(0x7f0000004180)=ANY=[@ANYBLOB="14000000000000000000ee270000000000003800000000000000000000000700000083271000000000ac1414bbac1e00010aaa79ffffe000000100000000001400000000000000000000000100000003000000000000009bbb56b9b15f8e9f2d3876b361ca0190dfba25d530e2923ee6ecf0cef44d5609a998e37e5be266c3696625"], 0x68}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000a80)="e4ff09b9dc0d6d6a424039d0596aca10570d29fa7941a5e2a367f1f80ee3052e68a49d720d0cb44c76006c08488439bd444a423c296f8b1dd47783c57bbacdd231d95c1bc036b949972b8e6c7f2be64b1ca3ad7fce0a67db43981cdc50860fdea4110ac10011fe20f3276ff6f2e97792849146fa7a0b24f82f730b679a550c2adbd9ff68adedd6f69138b951626873181225141d76b7e00954f902ae49ae4842caec960315ede5019af73c7f987bf053d5e6d1e9ac319bd088ec0934", 0xbc}, {&(0x7f0000000b40)="fa2bba4ce7269522ec62faba2767f7f05d90857968d536f89de0ba28eb9195901e51f83f9e242f95046b9ec565852bd8834c8f499934430ec0165918b0f94ba138ca639f5882ae882b32629cf884f114a69c8525958618ad0cc63512b73940e2bad6b917c749a4ef8a686f7f04d8ccd23eb296e119203e7f5e9d4f2f4e0dbca260a7649ea507d47da260c7d1c6218222d63bb55a6bf9bb1f35fbff074a5ead0de628b993d5b999c1f75bd26711daf028536dadcb907b38c465c67e77b22015f8fd844fb0bb85704d1e794503ccca84fc0effb1663b30946379c1b36ab6dc8cba9552d3f7c207", 0xe6}, {&(0x7f0000000c40)="d98f55e9583659349b2785e6e79b", 0xe}, {&(0x7f0000000c80)="0d4fee252679a517e99e646cb00a32387a3d3e2956c88f688641ef026d4e9f9d878ad7df6d94031e34c7951b045da67436479b913b2ab1366874d9b04cce26a775a8d8b195f02f80bbeef57215399b71a731c193f4837ab78a8abfacbcd1029b4845c29395", 0x65}, {&(0x7f0000000d00)="1baeaf63f303e8aa0f420f299bd7391396d83f468752aaac43d3bfbdb287cf187d8e0908456f409c87cf30121bf92f6ecf9af0f2abe3a7f4b7a8e94f293e06d5446e36796726627535d061b529bd65f351b40d175e7c645f4dcb76f5df1f90f70a20d89c2f843a663386bf3659d23c48c78bda2a118e2296fd0b7e8798572de75ccc2671eaddfba4501feae1c2d8d7390053c6cc6e57a2a6f56ba5706714fd45a5e986f8e6bccb07d50341d89cb9fe375ee3187091a83aa644e1d8933680a46967efef", 0xc3}, {&(0x7f0000000e00)="e0d856d8ec405285a62932513e4cfb0db29f76e4904ad97ef49dcc6b8ac6954e691de4f54154a2e9c51652a59b260de5c2887bdcd94279eeae350471b054cfa834fc5670acb983f33f4f3c8383e55c91e4a3d2fbd4a5b9b928315235fc6edc8bbd4872", 0x63}], 0x6, &(0x7f0000000f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x48}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="64d0da8cfadaf44f2673ec9788ed09a197e3931f0b19fdb206e9e4d4df51a342c71dd227d82340171c8e218a9581937cd9ba7aa1e76c93aea8b4efe967c32c01a96e92e341c8c6e1911fd9fbac9a7e97efa90091ccd50c5f8e66b2750d07459698ba82ab113664bebc4b82497e872457d09a3d4de8196989beaf2280aa11ac5c8f448055d0a31f8441522493430cb479fbe8d87921f559b9ac0ae741f5603dc7a40d191c22b353259e74b3766dd21a68cd4801aeb4b6124b31401e3dc5b9052f0a09563577f4741da36e46bb862d4f194d86117416d29e884303", 0xda}, {&(0x7f00000010c0)="6e8c10cf6bf090a62ce5493d023333f04a5aeedbc5b78e4d5889d985b2762ccb76cbbdff2f0c4d1dced3d9707d725e4f5342c2892e94f53aaa3ee8520f1dfbd99816a478d1f62af74a5f8504b09528a79e0e56c996364fb6e22c85865c2aa95ac694af750928493cd85f3e914fa9a69250125640b044d75178412d07f3950ecb0d50a755559c5245daed6adcf3c5004084fc25b629b28ccbead29443f6b1b5d03ebe7d2a0de205d9c2447a17e0451f8b299844b4bd2cdd22f6150a613cf775b32dee7751d321d9cde7c1c7104eb0dcad9bd0a4dca253bf06a9ac39e16a7c8979afaab721cc7f5f92cc26", 0xea}, {&(0x7f0000001600)="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", 0x1000}], 0x3, &(0x7f0000001200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xe8}}, {{&(0x7f0000001300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000001340)="6aea8bd971d84178d68cb252ad3adc34f534afcb2e304b00c5b08999a77660c16aa2167428031e56d6ed88c38cab0d985b6997cfabc35eda2985dac7ed3c5198e0e7c7892b16995d08763ac3b63eba93970850b3de207784a7f640b1b365778fa3973a167fe68ccee80cecdc2f582ac91eda492363c9f439093f5401bc351fe9b94ad40d0ebc84fef1ec7eb7d61267c1106328a09d97f915c82c33822f10907731d4a03088056232eb6a63fcc37951c84c9ff06ddf01a57ddc12395db2093232bd6ffacf571c1bfcf881fe7bffdc1ec31a437b0fb30ad733161cb6bae478587f", 0xe0}, {&(0x7f0000001440)="84bd1a638104643d2cc3aa062f7ff5e36cc081b940999d93469974fcc81128707f668e061d350c7852eb5bae5c7c3c711fb195a661278234db8a281c4245effa0af1b71324848420b2cd20fd93439899d9d473cccbb46eaa55347318e8ea7c44022964af6a56e50986998d2e0c490fd6fc07dc1350bcefb9d6e048cf3f390da850967bd4c3a151c65bdaeb73daea94cd2aec409c", 0x94}, {&(0x7f0000001500)="799ddd4c2fa518291b20a100", 0xc}, {&(0x7f0000002600)="efb4e719a31b74d517f956cffdcd4407d13eaa69553b9cb59be2eeb9cd234982dd807ef8c3c476624126c08fcfc1498fd5638771b090b72213e8e02806dfd018346c1688b39e9ec0b9f2f08180e7221bf745f400269d948c1bce1c40d3a341b6993cee39eb674d746c30a6cbe0b0ce0ee3d37916a6a73eee7ec52f83f6293eeda20c76e593632197daa38373cab0656ee354f34eb38f9c8470c9823c2493841ea5faa837c43e1e91df03759c447cd40ad38536b8c15267924b488a5ff90313e71110096fc7e1b1eae861df6941932f8f6e35888ee26d99f6d4e9", 0xda}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="ef6d1af0dc59009d0b139edd83d22a80cf9920c000d6ab1f693430696be7988c044696172124fda5cf9bb9a620c24e63e4085050d5a95f017df4f785a851882fafbdd06fecbbd23dd768f60ec6a05adf35dcec3a0ae15396f4fb4f2d5627db1d41b6958e7938c23041119a3b5ae29d1c1f83a08dc2bc2ea57d68da55a654ca6d394ff6ff784b7417daa0fc7107a16e", 0x8f}, {&(0x7f0000001540)="d2b0abd73180a3b0761c20fdcbe78248150141607c7cead2378ef8fe5e8677f806925ddee6e8e835efb409b596a9adad0a2ddb528fae7ebd36fd107476d5be560627454a292e0224a1ba7b9ea6ca82a51affcf8c643b18f9e59fb44cf71d02060589b03a4b3d74052be9940fb8446a83e385fad76514a687", 0x78}, {&(0x7f00000037c0)="3159909809bb06da66778b8ac12c4a9c93817b7d32bc0f3c3f6301816b192e7f41b63c8d1708544b86872b5d27e8076b4c6b24cdb354d4c635c2216d9fd4738400515eb31ee1d81af0832d468818cb4024a90fdf369048be9c64d76e24d9e10d6fe63cc7b1bc85abacd940ba1019afe1343e693fa8c1776c0a5588b26c81429890842d66042534239559b8c5b14fba1b18e588d9fc29df5d75a2d1562be3", 0x9e}, {&(0x7f0000003880)="2399383a5ff8a41b4ece1828b05bc56023f62fb37ff6c871b801cbbaf342c35b0e961ce9b78e2cc5820ba295eba4ce1a64e2c4fdba44721b0e7c35c2014d22d4ca53a6557850e211b45b00e8ba636c7a18e6b4a7d877abfa5acfd370cb7a4be89038e1c2f3a1bda78aeb61e56de66b9104135ffe53d489fcfb3981b0e7bc9c5cbf7c957adef30c5fffc0360494c04759d03edca18ff2881fe42e15f623084ccf8dd9e1faac530c1295e235efbedebf158f40ccce0ebe321a8d8e40e5669b9d6aa4", 0xc1}, {&(0x7f0000003980)}], 0xa, &(0x7f0000003ac0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x66, [@multicast1, @loopback]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @broadcast}}}], 0xb0}}], 0x5, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:51:08 executing program 4: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f0000001500)) r1 = syz_io_uring_setup(0x45c2, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0], 0x1) 00:51:08 executing program 1: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f0000001500)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x15, 0x0, 0x0) 00:51:08 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x18000000}]) 00:51:08 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) read$dsp(r0, 0x0, 0x0) 00:51:08 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40806685, 0x0) 00:51:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:09 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1f3ffff8}]) 00:51:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x1, 0x3, 0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x1, 0x3, 0x40}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:51:09 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x185282, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:51:09 executing program 1: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f0000001500)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1d) 00:51:09 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1f400000}]) 00:51:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket(0x2b, 0x1, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/72, 0xfffffdef}], 0x1}, 0x3) sendmsg$rds(r1, &(0x7f0000004140)={&(0x7f0000003980)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000003cc0)=""/71, 0x47}, {&(0x7f0000003d40)=""/233, 0xe9}, {&(0x7f0000003e40)=""/161, 0xa1}, {&(0x7f0000003f00)=""/171, 0xab}, {&(0x7f0000003fc0)=""/243, 0xf3}], 0x5, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = gettid() tkill(r2, 0x1000000000016) fcntl$setown(r1, 0x8, r2) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 64) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x5e, 0x81, 0x1, 0x20, @loopback, @loopback, 0x20, 0x40, 0x8, 0x63}}) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e6, r8}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'gre0\x00', 0x0}) (rerun: 32) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)="9140ca824b93d0ed296ed67dc30a24f98ee30702980f56213bb376f8a8693a38212ab73002bf67908d1a64f14792c3c774db44ace2c482705bbcb2a445d24fbdfbd60b69115f0f612cc7095bf2c82675f137dc7a4803ed2e05d65036a3", 0x5d}, {&(0x7f00000002c0)="01d738fcc9c41a4b723c010b06906b5594e3e315c08adaf13c99ee24ae72067e0ba721a105f2cb01e29bb9993d00072a145744c69d258a25a58173c866940f0848c3791691aa55e0a7c2dd6458b0c886f9ae52a07338c82290bca0a1b562ecbc2769fbe3533658809b8047b84bb6f041f7900ae77f05e576f5ade7adc378436120d9f55be0eda6df492446e98f46e28ab56a6d2bc30ac07de549ea35d639d7683689c37aae9384", 0xa7}, {&(0x7f0000000380)="2faa22e54c482cd275f91fc667a9f4375e51afbe1b0f8bb41943f12b232feb96e0a10eeb9a0df60068c717e3edfd51f0a093796ede41a2767d0030f567db6c43deedb03c159319877cdb174feb8f135aa012161b60db3faa1c6d9f7ff9a88797c7ef8a4f4653f7a7e0b4a5bbd16eb47acf5a13", 0x73}, {&(0x7f0000000440)="a95bac02de9d0e95d355cff14b09812136a689d6b4ee4442f1a434c9578cbfb31deea086e958405ca9bbbf2ce61b4975f55e570666274cbf5a71d00bfff60d10bb50306e49c028ced1f6ed96268c78f21730ff9410800327bf08b755d57960f2dc51df6f", 0x64}, {&(0x7f00000004c0)="a5d6f34843adffe40fd2a581cbbd72d171bec9827c83a55f0ee80225fc025b5cdcb33223987add4d256dc1efd93753decc3d09a3db6e16ac3fcd1c80eefb5632518e22eec73de8f2aadbf96ce5297d9f886441a0af9cffed1a2bf3f9b0e069f9bc1de1ef830c3b", 0x67}, {&(0x7f0000000540)="a5fafd0ea246c9eb7477ff4c9299a6d3e30ac76ee73d14fdead7641c3a14eebe47adb47df6a035", 0x27}], 0x6, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "d771"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast2}}}], 0x68}}, {{&(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000780)="a1f456dca3744920187c9430920d2649bbafd8bc072dd24bbb1275125379349b2eda2c4b2b59bc3ba29835cb7eed9853d3d8fa6699758f69a442108fd47a4c84c2ef915e58a3cfd80300f3e1cc27fe75cfb13f804a1284d1554dd2d05de9acab2a30f57e8aa384981ebcbaa0e6de050716c5bde3a48a21eb", 0x78}, {&(0x7f0000000800)="926ecf3c1b1e9ae599dbc67949dd298dd691314c5c3b8723384aa0a3d88b9edfa0258ccc3c9f9e5bf3d27e68e677efc6620a9e4e2aade585cb1813dfbdee38832e3c7bad3173aa51d92ee104741e26ea205463cbaa0d1742f259425b0767096883800fddfbe97bb268dbbbf22de200dc9cf02739cbb690808fcff5fda0a1438e08ba85b937b266a58a4f422a230e86f2ca", 0x91}, {&(0x7f00000008c0)="f642f981158fc063eaa701d5d58c3bc8e676a2cb2132fd8b2a52223ac1d2aeea04a72dd03a5ce7a9edaaec585d9950e385eafa647258b1a58efdb4c313b7938204d99768f25134f4ae47a96d5b87a31a47b97cb124901cb7059c13c0a4421bb22e27add6558c73a5a9952118167c9911289f90a30a09124c10c457fd6f5facd8e0f68db191d8a8e2fa37d9", 0x8b}], 0x3, &(0x7f0000004180)=ANY=[@ANYBLOB="14000000000000000000ee270000000000003800000000000000000000000700000083271000000000ac1414bbac1e00010aaa79ffffe000000100000000001400000000000000000000000100000003000000000000009bbb56b9b15f8e9f2d3876b361ca0190dfba25d530e2923ee6ecf0cef44d5609a998e37e5be266c3696625"], 0x68}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000a80)="e4ff09b9dc0d6d6a424039d0596aca10570d29fa7941a5e2a367f1f80ee3052e68a49d720d0cb44c76006c08488439bd444a423c296f8b1dd47783c57bbacdd231d95c1bc036b949972b8e6c7f2be64b1ca3ad7fce0a67db43981cdc50860fdea4110ac10011fe20f3276ff6f2e97792849146fa7a0b24f82f730b679a550c2adbd9ff68adedd6f69138b951626873181225141d76b7e00954f902ae49ae4842caec960315ede5019af73c7f987bf053d5e6d1e9ac319bd088ec0934", 0xbc}, {&(0x7f0000000b40)="fa2bba4ce7269522ec62faba2767f7f05d90857968d536f89de0ba28eb9195901e51f83f9e242f95046b9ec565852bd8834c8f499934430ec0165918b0f94ba138ca639f5882ae882b32629cf884f114a69c8525958618ad0cc63512b73940e2bad6b917c749a4ef8a686f7f04d8ccd23eb296e119203e7f5e9d4f2f4e0dbca260a7649ea507d47da260c7d1c6218222d63bb55a6bf9bb1f35fbff074a5ead0de628b993d5b999c1f75bd26711daf028536dadcb907b38c465c67e77b22015f8fd844fb0bb85704d1e794503ccca84fc0effb1663b30946379c1b36ab6dc8cba9552d3f7c207", 0xe6}, {&(0x7f0000000c40)="d98f55e9583659349b2785e6e79b", 0xe}, {&(0x7f0000000c80)="0d4fee252679a517e99e646cb00a32387a3d3e2956c88f688641ef026d4e9f9d878ad7df6d94031e34c7951b045da67436479b913b2ab1366874d9b04cce26a775a8d8b195f02f80bbeef57215399b71a731c193f4837ab78a8abfacbcd1029b4845c29395", 0x65}, {&(0x7f0000000d00)="1baeaf63f303e8aa0f420f299bd7391396d83f468752aaac43d3bfbdb287cf187d8e0908456f409c87cf30121bf92f6ecf9af0f2abe3a7f4b7a8e94f293e06d5446e36796726627535d061b529bd65f351b40d175e7c645f4dcb76f5df1f90f70a20d89c2f843a663386bf3659d23c48c78bda2a118e2296fd0b7e8798572de75ccc2671eaddfba4501feae1c2d8d7390053c6cc6e57a2a6f56ba5706714fd45a5e986f8e6bccb07d50341d89cb9fe375ee3187091a83aa644e1d8933680a46967efef", 0xc3}, {&(0x7f0000000e00)="e0d856d8ec405285a62932513e4cfb0db29f76e4904ad97ef49dcc6b8ac6954e691de4f54154a2e9c51652a59b260de5c2887bdcd94279eeae350471b054cfa834fc5670acb983f33f4f3c8383e55c91e4a3d2fbd4a5b9b928315235fc6edc8bbd4872", 0x63}], 0x6, &(0x7f0000000f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x48}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000fc0)="64d0da8cfadaf44f2673ec9788ed09a197e3931f0b19fdb206e9e4d4df51a342c71dd227d82340171c8e218a9581937cd9ba7aa1e76c93aea8b4efe967c32c01a96e92e341c8c6e1911fd9fbac9a7e97efa90091ccd50c5f8e66b2750d07459698ba82ab113664bebc4b82497e872457d09a3d4de8196989beaf2280aa11ac5c8f448055d0a31f8441522493430cb479fbe8d87921f559b9ac0ae741f5603dc7a40d191c22b353259e74b3766dd21a68cd4801aeb4b6124b31401e3dc5b9052f0a09563577f4741da36e46bb862d4f194d86117416d29e884303", 0xda}, {&(0x7f00000010c0)="6e8c10cf6bf090a62ce5493d023333f04a5aeedbc5b78e4d5889d985b2762ccb76cbbdff2f0c4d1dced3d9707d725e4f5342c2892e94f53aaa3ee8520f1dfbd99816a478d1f62af74a5f8504b09528a79e0e56c996364fb6e22c85865c2aa95ac694af750928493cd85f3e914fa9a69250125640b044d75178412d07f3950ecb0d50a755559c5245daed6adcf3c5004084fc25b629b28ccbead29443f6b1b5d03ebe7d2a0de205d9c2447a17e0451f8b299844b4bd2cdd22f6150a613cf775b32dee7751d321d9cde7c1c7104eb0dcad9bd0a4dca253bf06a9ac39e16a7c8979afaab721cc7f5f92cc26", 0xea}, {&(0x7f0000001600)="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", 0x1000}], 0x3, &(0x7f0000001200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xe8}}, {{&(0x7f0000001300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000001340)="6aea8bd971d84178d68cb252ad3adc34f534afcb2e304b00c5b08999a77660c16aa2167428031e56d6ed88c38cab0d985b6997cfabc35eda2985dac7ed3c5198e0e7c7892b16995d08763ac3b63eba93970850b3de207784a7f640b1b365778fa3973a167fe68ccee80cecdc2f582ac91eda492363c9f439093f5401bc351fe9b94ad40d0ebc84fef1ec7eb7d61267c1106328a09d97f915c82c33822f10907731d4a03088056232eb6a63fcc37951c84c9ff06ddf01a57ddc12395db2093232bd6ffacf571c1bfcf881fe7bffdc1ec31a437b0fb30ad733161cb6bae478587f", 0xe0}, {&(0x7f0000001440)="84bd1a638104643d2cc3aa062f7ff5e36cc081b940999d93469974fcc81128707f668e061d350c7852eb5bae5c7c3c711fb195a661278234db8a281c4245effa0af1b71324848420b2cd20fd93439899d9d473cccbb46eaa55347318e8ea7c44022964af6a56e50986998d2e0c490fd6fc07dc1350bcefb9d6e048cf3f390da850967bd4c3a151c65bdaeb73daea94cd2aec409c", 0x94}, {&(0x7f0000001500)="799ddd4c2fa518291b20a100", 0xc}, {&(0x7f0000002600)="efb4e719a31b74d517f956cffdcd4407d13eaa69553b9cb59be2eeb9cd234982dd807ef8c3c476624126c08fcfc1498fd5638771b090b72213e8e02806dfd018346c1688b39e9ec0b9f2f08180e7221bf745f400269d948c1bce1c40d3a341b6993cee39eb674d746c30a6cbe0b0ce0ee3d37916a6a73eee7ec52f83f6293eeda20c76e593632197daa38373cab0656ee354f34eb38f9c8470c9823c2493841ea5faa837c43e1e91df03759c447cd40ad38536b8c15267924b488a5ff90313e71110096fc7e1b1eae861df6941932f8f6e35888ee26d99f6d4e9", 0xda}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="ef6d1af0dc59009d0b139edd83d22a80cf9920c000d6ab1f693430696be7988c044696172124fda5cf9bb9a620c24e63e4085050d5a95f017df4f785a851882fafbdd06fecbbd23dd768f60ec6a05adf35dcec3a0ae15396f4fb4f2d5627db1d41b6958e7938c23041119a3b5ae29d1c1f83a08dc2bc2ea57d68da55a654ca6d394ff6ff784b7417daa0fc7107a16e", 0x8f}, {&(0x7f0000001540)="d2b0abd73180a3b0761c20fdcbe78248150141607c7cead2378ef8fe5e8677f806925ddee6e8e835efb409b596a9adad0a2ddb528fae7ebd36fd107476d5be560627454a292e0224a1ba7b9ea6ca82a51affcf8c643b18f9e59fb44cf71d02060589b03a4b3d74052be9940fb8446a83e385fad76514a687", 0x78}, {&(0x7f00000037c0)="3159909809bb06da66778b8ac12c4a9c93817b7d32bc0f3c3f6301816b192e7f41b63c8d1708544b86872b5d27e8076b4c6b24cdb354d4c635c2216d9fd4738400515eb31ee1d81af0832d468818cb4024a90fdf369048be9c64d76e24d9e10d6fe63cc7b1bc85abacd940ba1019afe1343e693fa8c1776c0a5588b26c81429890842d66042534239559b8c5b14fba1b18e588d9fc29df5d75a2d1562be3", 0x9e}, {&(0x7f0000003880)="2399383a5ff8a41b4ece1828b05bc56023f62fb37ff6c871b801cbbaf342c35b0e961ce9b78e2cc5820ba295eba4ce1a64e2c4fdba44721b0e7c35c2014d22d4ca53a6557850e211b45b00e8ba636c7a18e6b4a7d877abfa5acfd370cb7a4be89038e1c2f3a1bda78aeb61e56de66b9104135ffe53d489fcfb3981b0e7bc9c5cbf7c957adef30c5fffc0360494c04759d03edca18ff2881fe42e15f623084ccf8dd9e1faac530c1295e235efbedebf158f40ccce0ebe321a8d8e40e5669b9d6aa4", 0xc1}, {&(0x7f0000003980)}], 0xa, &(0x7f0000003ac0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x66, [@multicast1, @loopback]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @broadcast}}}], 0xb0}}], 0x5, 0x4000000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) 00:51:11 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001840)='/sys/class/mac80211_hwsim', 0x0, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:51:11 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x6e, r1}, 0x28) 00:51:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x1, 0x3, 0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:11 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x22000000}]) 00:51:11 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8001, 0x401}) 00:51:11 executing program 1: r0 = io_uring_setup(0x4d67, &(0x7f0000000180)) fstat(r0, &(0x7f0000001880)) 00:51:11 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2e000000}]) 00:51:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326c4c2484298d00020000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:11 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 00:51:12 executing program 1: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$damon_contexts(r0, &(0x7f0000000100)=ANY=[@ANYBLOB=' ./f'], 0x5) 00:51:14 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x30000000}]) 00:51:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000100)={0xfffffffffffff103, {0x1, 0xc67e, 0x3, 0x8000000000000000, 0xbc0}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:14 executing program 4: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f0000001500)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x11, 0x0, 0x0) 00:51:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326c4c2484298d00020000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326c4c2484298d00020000000000000000"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 00:51:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:14 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:51:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 00:51:14 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 00:51:15 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]) 00:51:15 executing program 4: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f0000001500)) r1 = syz_io_uring_setup(0x45c2, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 00:51:15 executing program 1: r0 = syz_io_uring_setup(0xc80, &(0x7f0000001440), &(0x7f00000014c0), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x8, &(0x7f0000000000)=[0x0, 0x4], 0x2) 00:51:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:15 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x40000000}]) 00:51:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000100)={0xfffffffffffff103, {0x1, 0xc67e, 0x3, 0x8000000000000000, 0xbc0}}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:15 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x42, 0x0) write$snapshot(r0, 0x0, 0x0) 00:51:15 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000280), 0xcd8e, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x1, 0xff}) 00:51:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326c4c2484298d00020000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x17, 0x0, 0x0}, 0x90) 00:51:16 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7d0e0000}]) 00:51:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040), 0xc) 00:51:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000100)={0xfffffffffffff103, {0x1, 0xc67e, 0x3, 0x8000000000000000, 0xbc0}}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:16 executing program 4: bpf$MAP_CREATE_RINGBUF(0x13, &(0x7f0000009800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:51:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x4000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000084000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="3e0f95790064660f3881b2b5000000b98f0a0000b86d550000ba000000000f30b9800000c00f3235004000000f3066baf80cb808a6d086ef66bafc0c662265b82331a2dd2331a2dd080000b80a000000ba0000000066b8df008ec8660f3821fe66baf80cc4e27979caef6426260f01c5ef2e2e0f01c3", 0x76}], 0x1, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:16 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xf4ffffff}]) 00:51:16 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x6, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) 00:51:17 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f0000000380)='./bus\x00', 0x0) mknod(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RREAD(r1, 0x0, 0x82) close(r1) rt_sigreturn() mknodat$loop(r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) setxattr(&(0x7f00000002c0)='./bus/file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="a3"], 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 00:51:17 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xf8ff3f1f}]) 00:51:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:17 executing program 1: io_setup(0x7f, &(0x7f0000002c80)) 00:51:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup(r4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x4000, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000084000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="3e0f95790064660f3881b2b5000000b98f0a0000b86d550000ba000000000f30b9800000c00f3235004000000f3066baf80cb808a6d086ef66bafc0c662265b82331a2dd2331a2dd080000b80a000000ba0000000066b8df008ec8660f3821fe66baf80cc4e27979caef6426260f01c5ef2e2e0f01c3", 0x76}], 0x1, 0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:18 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfbffffff}]) 00:51:18 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2}, 0x48) 00:51:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x4000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000084000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="3e0f95790064660f3881b2b5000000b98f0a0000b86d550000ba000000000f30b9800000c00f3235004000000f3066baf80cb808a6d086ef66bafc0c662265b82331a2dd2331a2dd080000b80a000000ba0000000066b8df008ec8660f3821fe66baf80cc4e27979caef6426260f01c5ef2e2e0f01c3", 0x76}], 0x1, 0x20, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:18 executing program 1: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) io_setup(0x7f, &(0x7f0000002c80)) io_setup(0x8000, &(0x7f0000002e00)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 00:51:18 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xff600000}]) 00:51:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup(r4) (async) dup(r4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:20 executing program 1: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f0000002b40)) io_setup(0x7f, &(0x7f0000002c80)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:51:20 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffefffff}]) 00:51:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000200)=""/153, 0x99}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10052) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:20 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002ec0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)}, 0x90) 00:51:21 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') 00:51:21 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffe703}]) 00:51:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000200)=""/153, 0x99}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10052) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c9a24c3ae8b7427e", "7cc385548ce557df700f6fab7eaa550e", "080001f9", "8ffdc5030100"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000080), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) 00:51:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:21 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffefff}]) 00:51:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) dup(r4) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e326946b9c0298ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000200)=""/153, 0x99}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10052) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:22 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}]) 00:51:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41280f30"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:51:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c9a24c3ae8b7427e", "7cc385548ce557df700f6fab7eaa550e", "080001f9", "8ffdc5030100"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) 00:51:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}]) 00:51:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="9e326946b9c02d8ddbcbb600f60faaee4d000000000000ff3fdd475202c1e0f60f78e9ed32f0231d55f65f839ab09bbe7c02529ca83699722d933901a22a17b601578a7cafe0c001688a8d1056208224ea28e453cf837903e125f9afc165130538ff15d68cf542c8c2330fc03907a27732c23748acf1f6941062c2cf7f0fb700b7e9d702aad4f30943b9839c5be121e828a91b063618d19240cd038d4f4c7970c7f2d03b67557f167a59117394c0f55f2616b5d4c97fc676e0fed63a625140896a1afb5cf0378288552df9e9e39eca8ed67165fa0000000000000000"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:51:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x2, 0x0) [ 3534.742751][T21864] ===================================================== [ 3534.750360][T21864] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x7c1/0x2520 [ 3534.757994][T21864] _copy_to_iter+0x7c1/0x2520 [ 3534.763462][T21864] seq_read_iter+0x4cb/0x20c0 [ 3534.768503][T21864] seq_read+0x1c9/0x290 [ 3534.773031][T21864] proc_reg_read+0x264/0x4a0 [ 3534.777875][T21864] do_iter_read+0x816/0x1380 [ 3534.785628][T21864] do_preadv+0x2ea/0x540 [ 3534.790650][T21864] __x64_sys_preadv+0xc0/0x110 [ 3534.795632][T21864] do_syscall_64+0x44/0x110 [ 3534.800587][T21864] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3534.806714][T21864] [ 3534.809152][T21864] Uninit was created at: [ 3534.813934][T21864] slab_post_alloc_hook+0x129/0xa70 [ 3534.819437][T21864] __kmem_cache_alloc_node+0x5c9/0x970 [ 3534.825377][T21864] __kmalloc_node+0x11c/0x3c0 [ 3534.830356][T21864] kvmalloc_node+0xc0/0x2d0 [ 3534.835089][T21864] traverse+0x107/0xa30 [ 3534.839509][T21864] seq_read_iter+0x1c8c/0x20c0 [ 3534.844792][T21864] seq_read+0x1c9/0x290 [ 3534.849201][T21864] proc_reg_read+0x264/0x4a0 [ 3534.854232][T21864] do_iter_read+0x816/0x1380 [ 3534.859074][T21864] do_preadv+0x2ea/0x540 [ 3534.863915][T21864] __x64_sys_preadv+0xc0/0x110 [ 3534.868938][T21864] do_syscall_64+0x44/0x110 [ 3534.873849][T21864] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3534.880147][T21864] [ 3534.885191][T21864] Byte 107 of 108 is uninitialized [ 3534.890904][T21864] Memory access of size 108 starts at ffff8880aceeb002 [ 3534.898085][T21864] Data copied to user address 00000000200000c0 [ 3534.904602][T21864] [ 3534.907055][T21864] CPU: 0 PID: 21864 Comm: syz-executor.4 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3534.917966][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3534.928955][T21864] ===================================================== [ 3534.936337][T21864] Disabling lock debugging due to kernel taint 00:51:24 executing program 2: io_setup(0x222, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}]) [ 3534.942773][T21864] Kernel panic - not syncing: kmsan.panic set ... [ 3534.949427][T21864] CPU: 0 PID: 21864 Comm: syz-executor.4 Tainted: G B 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0 [ 3534.961549][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 3534.971889][T21864] Call Trace: [ 3534.975312][T21864] [ 3534.978372][T21864] dump_stack_lvl+0x1bf/0x240 [ 3534.983281][T21864] dump_stack+0x1e/0x20 [ 3534.987638][T21864] panic+0x4de/0xc90 [ 3534.991806][T21864] ? add_taint+0x108/0x1a0 [ 3534.996599][T21864] kmsan_report+0x2d0/0x2d0 [ 3535.001357][T21864] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3535.007430][T21864] ? kmsan_internal_check_memory+0x476/0x530 [ 3535.013673][T21864] ? kmsan_copy_to_user+0xd3/0xf0 [ 3535.019084][T21864] ? _copy_to_iter+0x7c1/0x2520 [ 3535.024181][T21864] ? seq_read_iter+0x4cb/0x20c0 [ 3535.029225][T21864] ? seq_read+0x1c9/0x290 [ 3535.033760][T21864] ? proc_reg_read+0x264/0x4a0 [ 3535.038707][T21864] ? do_iter_read+0x816/0x1380 [ 3535.043633][T21864] ? do_preadv+0x2ea/0x540 [ 3535.048214][T21864] ? __x64_sys_preadv+0xc0/0x110 [ 3535.053314][T21864] ? do_syscall_64+0x44/0x110 [ 3535.058198][T21864] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3535.064460][T21864] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3535.070497][T21864] ? vsnprintf+0x2975/0x29e0 [ 3535.075328][T21864] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 3535.081873][T21864] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3535.087990][T21864] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3535.094037][T21864] kmsan_internal_check_memory+0x476/0x530 [ 3535.100081][T21864] kmsan_copy_to_user+0xd3/0xf0 [ 3535.105156][T21864] ? should_fail_usercopy+0x2e/0x40 [ 3535.110581][T21864] _copy_to_iter+0x7c1/0x2520 [ 3535.115422][T21864] ? _raw_spin_unlock+0x30/0x50 [ 3535.120479][T21864] ? md_seq_stop+0x202/0x220 [ 3535.125319][T21864] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3535.131337][T21864] ? md_seq_start+0x171/0x240 [ 3535.136246][T21864] seq_read_iter+0x4cb/0x20c0 [ 3535.141144][T21864] seq_read+0x1c9/0x290 [ 3535.145498][T21864] ? seq_open+0x260/0x260 [ 3535.150007][T21864] proc_reg_read+0x264/0x4a0 [ 3535.154800][T21864] do_iter_read+0x816/0x1380 [ 3535.159571][T21864] ? proc_reg_get_unmapped_area+0x590/0x590 [ 3535.165662][T21864] do_preadv+0x2ea/0x540 [ 3535.170358][T21864] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 3535.176383][T21864] __x64_sys_preadv+0xc0/0x110 [ 3535.181320][T21864] do_syscall_64+0x44/0x110 [ 3535.185993][T21864] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 3535.192089][T21864] RIP: 0033:0x7f93a907cae9 [ 3535.196633][T21864] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3535.216521][T21864] RSP: 002b:00007f93a9d650c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 3535.225117][T21864] RAX: ffffffffffffffda RBX: 00007f93a919bf80 RCX: 00007f93a907cae9 [ 3535.233277][T21864] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003 [ 3535.241398][T21864] RBP: 00007f93a90c847a R08: 0000000000000000 R09: 0000000000000000 [ 3535.249600][T21864] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 3535.257798][T21864] R13: 000000000000000b R14: 00007f93a919bf80 R15: 00007f93a92bfa48 [ 3535.266026][T21864] [ 3535.269467][T21864] Kernel Offset: disabled [ 3535.273873][T21864] Rebooting in 86400 seconds..