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", &(0x7f0000000340)=""/188, 0x7c5, 0x10030, 0xffffffffffffffff, &(0x7f0000000400)}) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="824f79d366b9800000c00f326635000800000f300f237b0f3066b85e6600000f23c00f21f86635030008000f23f8c4c3a9cefe26ba4300b016ee0f0f3ba4660fc20300bad104ed", 0x47}], 0x1, 0x41, &(0x7f00000004c0)=[@flags={0x3, 0x280110}, @cr0], 0x2) (async) socket$inet(0x2, 0x1, 0x401) (async) socket$inet(0x2, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x8, 0xb8, 0x5, 0x5, 0xdf6], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) (async) socket$inet(0x2, 0x8, 0xff) (async) 07:18:05 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 07:18:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x606303, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400100, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) r1 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000280)={0xffffffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="66b842000f00d8b8010000000f01c1470f50cd3e420f078fa9409a1d05000000de17f30f231f66400fc730440f01c46536653e36420fc73b", 0x38}], 0x1, 0x1d, &(0x7f0000000100), 0x0) (async) ioctl$sock_inet_SIOCDARP(r5, 0x8953, 0x0) 07:18:05 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 07:18:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa5024d621b726d1d, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000)="c3609b5b628f6c7549487bd1a3a705db60a49eb828a9f0ab9d8ee031af1d9c0c3f316cfe", &(0x7f0000000080)=""/77, &(0x7f0000000100)="1d136d33e09c0c1317af473573e3131e57a4cdaa2336a844118c2ec084b2e5038fda1fd08b6e285397b1557f216b473c0c658f665c71570b", &(0x7f0000000140)="97813d5deb5fd2ae79132683b69aa82078fd910322a0322f2a831829ebb69096a87f562f31bb52f7bdb24f76c59f1357076e364e03dc17540b6550d29ad4c9d78c76af5af5c37e48c7f240005e", 0x1, 0xffffffffffffffff, 0x4}, 0x38) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa5024d621b726d1d, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000)="c3609b5b628f6c7549487bd1a3a705db60a49eb828a9f0ab9d8ee031af1d9c0c3f316cfe", &(0x7f0000000080)=""/77, &(0x7f0000000100)="1d136d33e09c0c1317af473573e3131e57a4cdaa2336a844118c2ec084b2e5038fda1fd08b6e285397b1557f216b473c0c658f665c71570b", &(0x7f0000000140)="97813d5deb5fd2ae79132683b69aa82078fd910322a0322f2a831829ebb69096a87f562f31bb52f7bdb24f76c59f1357076e364e03dc17540b6550d29ad4c9d78c76af5af5c37e48c7f240005e", 0x1, 0xffffffffffffffff, 0x4}, 0x38) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:05 executing program 2: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="d389fff66a6b06304803d2944bdee31f97cd58dd0a07e323fad7c96f6f66e7faf97f70f2dcbecc75621fe1bebab689f1e334346fee6e46682dfc318946c05e", 0x3f, 0x4040001, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x4, 0x4e23, 0x54e7, 0xa, 0x0, 0x20, 0x3c, r3}, {0x9, 0x2, 0x7ff, 0x20, 0x9, 0x2, 0x0, 0x8000000000000000}, {0x5, 0x3, 0x8e6d, 0x4}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x2, @in=@local, 0x3502, 0x3, 0x1, 0x0, 0x5, 0xfd0, 0x100}}, 0xe8) 07:18:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x606303, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400100, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async, rerun: 64) r1 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000280)={0xffffffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c0, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="66b842000f00d8b8010000000f01c1470f50cd3e420f078fa9409a1d05000000de17f30f231f66400fc730440f01c46536653e36420fc73b", 0x38}], 0x1, 0x1d, &(0x7f0000000100), 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCDARP(r5, 0x8953, 0x0) (rerun: 64) 07:18:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40a42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480482, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000000)) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)={@loopback, @rand_addr=0x64010100, 0x1, 0x7, [@rand_addr=0x64010101, @loopback, @multicast2, @local, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0xd}]}, 0x2c) 07:18:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) getrlimit(0xc, &(0x7f0000000340)) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x7, 0x2], 0x101}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f00000001c0)=""/151, 0x97, 0x0, &(0x7f0000000280)=""/103, 0x67}}, 0x10) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x800, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x701200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffc, 0x1000, 0x7, @buffer={0x0, 0x99, &(0x7f0000000280)=""/153}, &(0x7f0000000640)="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", &(0x7f0000000340)=""/188, 0x7c5, 0x10030, 0xffffffffffffffff, &(0x7f0000000400)}) (async, rerun: 32) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="824f79d366b9800000c00f326635000800000f300f237b0f3066b85e6600000f23c00f21f86635030008000f23f8c4c3a9cefe26ba4300b016ee0f0f3ba4660fc20300bad104ed", 0x47}], 0x1, 0x41, &(0x7f00000004c0)=[@flags={0x3, 0x280110}, @cr0], 0x2) (async, rerun: 32) socket$inet(0x2, 0x1, 0x401) (async, rerun: 64) r5 = socket$inet(0x2, 0x3, 0x6) (rerun: 64) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x8, 0xb8, 0x5, 0x5, 0xdf6], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) socket$inet(0x2, 0x8, 0xff) 07:18:05 executing program 2: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="d389fff66a6b06304803d2944bdee31f97cd58dd0a07e323fad7c96f6f66e7faf97f70f2dcbecc75621fe1bebab689f1e334346fee6e46682dfc318946c05e", 0x3f, 0x4040001, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x4, 0x4e23, 0x54e7, 0xa, 0x0, 0x20, 0x3c, r3}, {0x9, 0x2, 0x7ff, 0x20, 0x9, 0x2, 0x0, 0x8000000000000000}, {0x5, 0x3, 0x8e6d, 0x4}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x2, @in=@local, 0x3502, 0x3, 0x1, 0x0, 0x5, 0xfd0, 0x100}}, 0xe8) 07:18:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40a42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480482, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000000)) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)={@loopback, @rand_addr=0x64010100, 0x1, 0x7, [@rand_addr=0x64010101, @loopback, @multicast2, @local, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0xd}]}, 0x2c) 07:18:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x800, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) 07:18:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x701200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getrlimit(0xc, &(0x7f0000000340)) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x7, 0x2], 0x101}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f00000001c0)=""/151, 0x97, 0x0, &(0x7f0000000280)=""/103, 0x67}}, 0x10) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:05 executing program 2: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="d389fff66a6b06304803d2944bdee31f97cd58dd0a07e323fad7c96f6f66e7faf97f70f2dcbecc75621fe1bebab689f1e334346fee6e46682dfc318946c05e", 0x3f, 0x4040001, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x4, 0x4e23, 0x54e7, 0xa, 0x0, 0x20, 0x3c, r3}, {0x9, 0x2, 0x7ff, 0x20, 0x9, 0x2, 0x0, 0x8000000000000000}, {0x5, 0x3, 0x8e6d, 0x4}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x2, @in=@local, 0x3502, 0x3, 0x1, 0x0, 0x5, 0xfd0, 0x100}}, 0xe8) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f00000002c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="d389fff66a6b06304803d2944bdee31f97cd58dd0a07e323fad7c96f6f66e7faf97f70f2dcbecc75621fe1bebab689f1e334346fee6e46682dfc318946c05e", 0x3f, 0x4040001, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x4, 0x4e23, 0x54e7, 0xa, 0x0, 0x20, 0x3c, r3}, {0x9, 0x2, 0x7ff, 0x20, 0x9, 0x2, 0x0, 0x8000000000000000}, {0x5, 0x3, 0x8e6d, 0x4}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x2, @in=@local, 0x3502, 0x3, 0x1, 0x0, 0x5, 0xfd0, 0x100}}, 0xe8) (async) 07:18:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40a42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480482, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000000)) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)={@loopback, @rand_addr=0x64010100, 0x1, 0x7, [@rand_addr=0x64010101, @loopback, @multicast2, @local, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0xd}]}, 0x2c) 07:18:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x701200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x701200, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 07:18:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000000006) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:05 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 07:18:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9b10b0000b80c000000ba000000000f30f3450f5b71dec482f923f3f30f0966baf80cb858f1df84ef66bafc0ced660fc7700048b810a8fc60000000000f23c00f21f835030005000f23f8672e0f01c8b805000000b94b0000000f01d936400f01ca", 0x62}], 0x1, 0x40, &(0x7f0000000100)=[@cstype0={0x4, 0x1}], 0x1) 07:18:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x230500, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 07:18:05 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 07:18:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x230500, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 07:18:05 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) (async) 07:18:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000000006) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9b10b0000b80c000000ba000000000f30f3450f5b71dec482f923f3f30f0966baf80cb858f1df84ef66bafc0ced660fc7700048b810a8fc60000000000f23c00f21f835030005000f23f8672e0f01c8b805000000b94b0000000f01d936400f01ca", 0x62}], 0x1, 0x40, &(0x7f0000000100)=[@cstype0={0x4, 0x1}], 0x1) 07:18:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x230500, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) (async) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x31b440, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28a000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8600, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x4b, 0x7, @scatter={0x2, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001180)="b83d81a8b4530810697f34bd07c884a2df7cde7bfd5e28eed8d912db49d16ce87d468df2635ddccb8a7dd474547c2d6e7cebc2f8b2d68106fe41ecdd05f09dcf0a9a53be3ba58692c219ec", &(0x7f0000001200)=""/227, 0x3, 0x4, 0x3, &(0x7f0000001300)}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0x3}, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:18:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x0, 0x7738, 0x10001, 0x1682, 0xffffffffffffffff, 0x65a1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa0000000000000000000000000000000000080600"/113], 0x78) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/242, 0xf2, 0x1, &(0x7f0000000140)=""/179, 0xb3}, &(0x7f0000000240)=0x40) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000280)={0x1, 'pim6reg\x00', 0x3}, 0x18) 07:18:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x103fe, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 07:18:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) (rerun: 32) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000140)) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9b10b0000b80c000000ba000000000f30f3450f5b71dec482f923f3f30f0966baf80cb858f1df84ef66bafc0ced660fc7700048b810a8fc60000000000f23c00f21f835030005000f23f8672e0f01c8b805000000b94b0000000f01d936400f01ca", 0x62}], 0x1, 0x40, &(0x7f0000000100)=[@cstype0={0x4, 0x1}], 0x1) 07:18:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000000006) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x0, 0x7738, 0x10001, 0x1682, 0xffffffffffffffff, 0x65a1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa0000000000000000000000000000000000080600"/113], 0x78) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/242, 0xf2, 0x1, &(0x7f0000000140)=""/179, 0xb3}, &(0x7f0000000240)=0x40) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000280)={0x1, 'pim6reg\x00', 0x3}, 0x18) 07:18:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x4b, 0x7, @scatter={0x2, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001180)="b83d81a8b4530810697f34bd07c884a2df7cde7bfd5e28eed8d912db49d16ce87d468df2635ddccb8a7dd474547c2d6e7cebc2f8b2d68106fe41ecdd05f09dcf0a9a53be3ba58692c219ec", &(0x7f0000001200)=""/227, 0x3, 0x4, 0x3, &(0x7f0000001300)}) (async) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0x3}, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:18:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0x94, ""/148}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80200) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0x5, 0x5, 0xfb7f}, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x31b440, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28a000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8600, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000000c0)) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x103fe, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 07:18:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x0, 0x7738, 0x10001, 0x1682, 0xffffffffffffffff, 0x65a1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa0000000000000000000000000000000000080600"/113], 0x78) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/242, 0xf2, 0x1, &(0x7f0000000140)=""/179, 0xb3}, &(0x7f0000000240)=0x40) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000280)={0x1, 'pim6reg\x00', 0x3}, 0x18) 07:18:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x4b, 0x7, @scatter={0x2, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/4096, 0x1000}]}, &(0x7f0000001180)="b83d81a8b4530810697f34bd07c884a2df7cde7bfd5e28eed8d912db49d16ce87d468df2635ddccb8a7dd474547c2d6e7cebc2f8b2d68106fe41ecdd05f09dcf0a9a53be3ba58692c219ec", &(0x7f0000001200)=""/227, 0x3, 0x4, 0x3, &(0x7f0000001300)}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0x3}, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 07:18:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x31b440, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28a000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8600, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x103fe, 0x0, &(0x7f0000ffa000/0x4000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000000c0)) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x103fe, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (async) 07:18:06 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r2 = socket(0x1d, 0x3, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x100, 0x6c0, 0x1f, 0x78, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0xfffffffd, 0x4) 07:18:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0x94, ""/148}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80200) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0x5, 0x5, 0xfb7f}, &(0x7f00000000c0)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) (rerun: 64) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x200000) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000080)={0x7}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) r4 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0xfffffffc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) 07:18:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:07 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) r2 = socket(0x1d, 0x3, 0x9) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x100, 0x6c0, 0x1f, 0x78, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)}, 0x10) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0xfffffffd, 0x4) 07:18:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) (async) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0x94, ""/148}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80200) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0x5, 0x5, 0xfb7f}, &(0x7f00000000c0)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:07 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) r2 = socket(0x1d, 0x3, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x100, 0x6c0, 0x1f, 0x78, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0xfffffffd, 0x4) 07:18:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) 07:18:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) r4 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0xfffffffc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) socket(0x28, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) (async) socket(0x28, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0xfffffffc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) (async) 07:18:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x200000) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000080)={0x7}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) 07:18:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) 07:18:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x6, @random="5ac2670865ef"}, 0x24, {0x2, 0x4e20, @multicast2}, 'macvlan1\x00'}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x6, @random="5ac2670865ef"}, 0x24, {0x2, 0x4e20, @multicast2}, 'macvlan1\x00'}) (async, rerun: 32) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (rerun: 32) 07:18:07 executing program 2: socket(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) r4 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0xfffffffc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) 07:18:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x6, @random="5ac2670865ef"}, 0x24, {0x2, 0x4e20, @multicast2}, 'macvlan1\x00'}) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:08 executing program 2: socket(0x1, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:08 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001480)) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/45, 0x2d}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b7b6697ea760310c28fffcf9ebd8861d9f36313a89a5a58b33c022092660c655bf7f4811a7fc4ccabb44b9a755f078f5cb1756b3e5e2da11a0c7b6e3", &(0x7f0000000140)=""/76, &(0x7f00000001c0)="4756bd2227028ba0284388997067c662647fd61a4eb07c5dffb06e510292cb03562223d2753471e4d5f1ab95437e6097703fa061e8aa9dd9af58baac822ced307558495078211267d539fcd9c0ae320433d402ebb8dc8b2a0e4267afcb038e82ff4e399f71850d9ce170e5515f2b2d061e64171c9bfa9d618f227ae9a89df0bcd6324a902496ab0e4cdeb54c15ad27b39d8c2dd2851b8eaec247cf8b", &(0x7f0000000280)="9c462e2e7d3677d8eba10dd60a2c8424fa215ab4905dcd17d057824361c61c78ea17cfa993d1b5cb70216e43ff48bc9c9745ab84a76b320144407066cb6c4218c4a8766558925d7764b6f057b3b8730a32865dd269f70ff99bdae24a659c54e0bd19daea73bca5d8a6416cc6e0ba408b3895f4892de5fbc205e552a8138fe00b8b8fddc981c309f435318499daf64dd59fa1a4eb913533aefaa220c84afd48c23de449ef4084b4e30fa0a19e8c7e", 0x6, 0x1}, 0x38) 07:18:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x10000, 0x101100) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="650fc71eb8f20f01d1640f22180ffaba00002e0fc77a000f0059000be00f20e06635000010000f22e06766c7442400010000006766c7442402b28800006766c744240600000000670f011c2466b9800000c00f326635001000000f30", 0x5c}], 0x1, 0x2, &(0x7f0000000100)=[@flags={0x3, 0x900}], 0x1) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e22, @broadcast}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x410002) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x5, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 07:18:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x200000) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000080)={0x7}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:08 executing program 2: socket(0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) socket(0x1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) 07:18:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 07:18:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x10000, 0x101100) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="650fc71eb8f20f01d1640f22180ffaba00002e0fc77a000f0059000be00f20e06635000010000f22e06766c7442400010000006766c7442402b28800006766c744240600000000670f011c2466b9800000c00f326635001000000f30", 0x5c}], 0x1, 0x2, &(0x7f0000000100)=[@flags={0x3, 0x900}], 0x1) (async) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e22, @broadcast}}}, 0x88) (async) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x410002) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x5, 0x2}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 07:18:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) (async) 07:18:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x10000, 0x101100) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000002c0)) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="650fc71eb8f20f01d1640f22180ffaba00002e0fc77a000f0059000be00f20e06635000010000f22e06766c7442400010000006766c7442402b28800006766c744240600000000670f011c2466b9800000c00f326635001000000f30", 0x5c}], 0x1, 0x2, &(0x7f0000000100)=[@flags={0x3, 0x900}], 0x1) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000001c0)={0x9, {{0x2, 0x4e22, @broadcast}}}, 0x88) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x410002) (rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x5, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 07:18:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) 07:18:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) r2 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) (async, rerun: 32) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) (rerun: 32) 07:18:09 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001480)) (async) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/45, 0x2d}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b7b6697ea760310c28fffcf9ebd8861d9f36313a89a5a58b33c022092660c655bf7f4811a7fc4ccabb44b9a755f078f5cb1756b3e5e2da11a0c7b6e3", &(0x7f0000000140)=""/76, &(0x7f00000001c0)="4756bd2227028ba0284388997067c662647fd61a4eb07c5dffb06e510292cb03562223d2753471e4d5f1ab95437e6097703fa061e8aa9dd9af58baac822ced307558495078211267d539fcd9c0ae320433d402ebb8dc8b2a0e4267afcb038e82ff4e399f71850d9ce170e5515f2b2d061e64171c9bfa9d618f227ae9a89df0bcd6324a902496ab0e4cdeb54c15ad27b39d8c2dd2851b8eaec247cf8b", &(0x7f0000000280)="9c462e2e7d3677d8eba10dd60a2c8424fa215ab4905dcd17d057824361c61c78ea17cfa993d1b5cb70216e43ff48bc9c9745ab84a76b320144407066cb6c4218c4a8766558925d7764b6f057b3b8730a32865dd269f70ff99bdae24a659c54e0bd19daea73bca5d8a6416cc6e0ba408b3895f4892de5fbc205e552a8138fe00b8b8fddc981c309f435318499daf64dd59fa1a4eb913533aefaa220c84afd48c23de449ef4084b4e30fa0a19e8c7e", 0x6, 0x1}, 0x38) 07:18:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8000000800f23c80f21f8350c00e0000f23f8b8010000000f01d9c4c255de35585fd040b9800000c00f3235000400000f3064660f38807700f22e67f081585a020000000fa7c066b804010f00d8f36fc4e27d3433", 0x55}], 0x1, 0x1, &(0x7f0000000140)=[@dstype3={0x7, 0x7}, @cstype0={0x4, 0x1}], 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="b99c0a00000f3226660ffc22e85cb4ddee0f23950f01c964410f01c866baf80cb82ab2a285ef66bafc0c66b82c9a66ef8f29f812c6470f07b8010000000f01d9", 0x40}], 0x1, 0x794aa099abea81d3, &(0x7f0000000240), 0x0) 07:18:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) 07:18:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) 07:18:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) 07:18:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) socket$inet(0x2, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @loopback}}}, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) (async) 07:18:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 07:18:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8000000800f23c80f21f8350c00e0000f23f8b8010000000f01d9c4c255de35585fd040b9800000c00f3235000400000f3064660f38807700f22e67f081585a020000000fa7c066b804010f00d8f36fc4e27d3433", 0x55}], 0x1, 0x1, &(0x7f0000000140)=[@dstype3={0x7, 0x7}, @cstype0={0x4, 0x1}], 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="b99c0a00000f3226660ffc22e85cb4ddee0f23950f01c964410f01c866baf80cb82ab2a285ef66bafc0c66b82c9a66ef8f29f812c6470f07b8010000000f01d9", 0x40}], 0x1, 0x794aa099abea81d3, &(0x7f0000000240), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8000000800f23c80f21f8350c00e0000f23f8b8010000000f01d9c4c255de35585fd040b9800000c00f3235000400000f3064660f38807700f22e67f081585a020000000fa7c066b804010f00d8f36fc4e27d3433", 0x55}], 0x1, 0x1, &(0x7f0000000140)=[@dstype3={0x7, 0x7}, @cstype0={0x4, 0x1}], 0x2) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="b99c0a00000f3226660ffc22e85cb4ddee0f23950f01c964410f01c866baf80cb82ab2a285ef66bafc0c66b82c9a66ef8f29f812c6470f07b8010000000f01d9", 0x40}], 0x1, 0x794aa099abea81d3, &(0x7f0000000240), 0x0) (async) 07:18:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) socket$inet(0x2, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @loopback}}}, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (async) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) (async) 07:18:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x2, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) 07:18:10 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001480)) (async) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) (async, rerun: 32) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/45, 0x2d}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000100)="b7b6697ea760310c28fffcf9ebd8861d9f36313a89a5a58b33c022092660c655bf7f4811a7fc4ccabb44b9a755f078f5cb1756b3e5e2da11a0c7b6e3", &(0x7f0000000140)=""/76, &(0x7f00000001c0)="4756bd2227028ba0284388997067c662647fd61a4eb07c5dffb06e510292cb03562223d2753471e4d5f1ab95437e6097703fa061e8aa9dd9af58baac822ced307558495078211267d539fcd9c0ae320433d402ebb8dc8b2a0e4267afcb038e82ff4e399f71850d9ce170e5515f2b2d061e64171c9bfa9d618f227ae9a89df0bcd6324a902496ab0e4cdeb54c15ad27b39d8c2dd2851b8eaec247cf8b", &(0x7f0000000280)="9c462e2e7d3677d8eba10dd60a2c8424fa215ab4905dcd17d057824361c61c78ea17cfa993d1b5cb70216e43ff48bc9c9745ab84a76b320144407066cb6c4218c4a8766558925d7764b6f057b3b8730a32865dd269f70ff99bdae24a659c54e0bd19daea73bca5d8a6416cc6e0ba408b3895f4892de5fbc205e552a8138fe00b8b8fddc981c309f435318499daf64dd59fa1a4eb913533aefaa220c84afd48c23de449ef4084b4e30fa0a19e8c7e", 0x6, 0x1}, 0x38) 07:18:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) (async) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) (async) 07:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 07:18:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/95, 0x5f, 0x0, &(0x7f00000000c0)=""/158, 0x9e}}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 07:18:10 executing program 2: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x1f, [0x7fffffff, 0xaa, 0x3, 0xffffffffffffffc0, 0x2], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/31}, &(0x7f00000001c0)=0x78) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r3, 0x0, &(0x7f0000000180), 0x400) 07:18:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8000000800f23c80f21f8350c00e0000f23f8b8010000000f01d9c4c255de35585fd040b9800000c00f3235000400000f3064660f38807700f22e67f081585a020000000fa7c066b804010f00d8f36fc4e27d3433", 0x55}], 0x1, 0x1, &(0x7f0000000140)=[@dstype3={0x7, 0x7}, @cstype0={0x4, 0x1}], 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="b99c0a00000f3226660ffc22e85cb4ddee0f23950f01c964410f01c866baf80cb82ab2a285ef66bafc0c66b82c9a66ef8f29f812c6470f07b8010000000f01d9", 0x40}], 0x1, 0x794aa099abea81d3, &(0x7f0000000240), 0x0) 07:18:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xed4, 0x1, 0x10}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x7b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x10000) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) 07:18:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 32) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8000000800f23c80f21f8350c00e0000f23f8b8010000000f01d9c4c255de35585fd040b9800000c00f3235000400000f3064660f38807700f22e67f081585a020000000fa7c066b804010f00d8f36fc4e27d3433", 0x55}], 0x1, 0x1, &(0x7f0000000140)=[@dstype3={0x7, 0x7}, @cstype0={0x4, 0x1}], 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="b99c0a00000f3226660ffc22e85cb4ddee0f23950f01c964410f01c866baf80cb82ab2a285ef66bafc0c66b82c9a66ef8f29f812c6470f07b8010000000f01d9", 0x40}], 0x1, 0x794aa099abea81d3, &(0x7f0000000240), 0x0) 07:18:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/95, 0x5f, 0x0, &(0x7f00000000c0)=""/158, 0x9e}}, 0x10) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:10 executing program 2: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x1f, [0x7fffffff, 0xaa, 0x3, 0xffffffffffffffc0, 0x2], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/31}, &(0x7f00000001c0)=0x78) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r3, 0x0, &(0x7f0000000180), 0x400) 07:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="440f20c03507000000440f22c0c74424000d000000c74424026e8ba9d8c7442406000000000f011424b805000000b9000000000f01d966baf80cb8d8e66d86ef66bafc0cecb8010000000f01d90f01c20fc71b0f01df440f20c03507000000440f22c0b9800000c00f3235001000000f30", 0x71}], 0x1, 0x0, &(0x7f0000000100), 0x0) 07:18:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xed4, 0x1, 0x10}) (async) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x7b) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x10000) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) 07:18:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/95, 0x5f, 0x0, &(0x7f00000000c0)=""/158, 0x9e}}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/95, 0x5f, 0x0, &(0x7f00000000c0)=""/158, 0x9e}}, 0x10) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000001c0)={0x101ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) 07:18:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xed4, 0x1, 0x10}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x7b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x10000) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x40) (async) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0xed4, 0x1, 0x10}) (async) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x7b) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x10000) (async) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) (async) 07:18:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) r4 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0xfffffffc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) 07:18:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6766c7442400bad000006766c7442402c3e000006766c744240600000000670f0114240f01c3652e0f01c50f01df0fc79fd64cba210066ed260f73d30af36767260f22570f015805642e0f08", 0x4c}], 0x1, 0x24, &(0x7f0000000100), 0x0) 07:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="440f20c03507000000440f22c0c74424000d000000c74424026e8ba9d8c7442406000000000f011424b805000000b9000000000f01d966baf80cb8d8e66d86ef66bafc0cecb8010000000f01d90f01c20fc71b0f01df440f20c03507000000440f22c0b9800000c00f3235001000000f30", 0x71}], 0x1, 0x0, &(0x7f0000000100), 0x0) 07:18:11 executing program 2: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x1f, [0x7fffffff, 0xaa, 0x3, 0xffffffffffffffc0, 0x2], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/31}, &(0x7f00000001c0)=0x78) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r3, 0x0, &(0x7f0000000180), 0x400) 07:18:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="440f20c03507000000440f22c0c74424000d000000c74424026e8ba9d8c7442406000000000f011424b805000000b9000000000f01d966baf80cb8d8e66d86ef66bafc0cecb8010000000f01d90f01c20fc71b0f01df440f20c03507000000440f22c0b9800000c00f3235001000000f30", 0x71}], 0x1, 0x0, &(0x7f0000000100), 0x0) 07:18:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x513841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6766c7442400bad000006766c7442402c3e000006766c744240600000000670f0114240f01c3652e0f01c50f01df0fc79fd64cba210066ed260f73d30af36767260f22570f015805642e0f08", 0x4c}], 0x1, 0x24, &(0x7f0000000100), 0x0) 07:18:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x513841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x513841, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) 07:18:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6766c7442400bad000006766c7442402c3e000006766c744240600000000670f0114240f01c3652e0f01c50f01df0fc79fd64cba210066ed260f73d30af36767260f22570f015805642e0f08", 0x4c}], 0x1, 0x24, &(0x7f0000000100), 0x0) 07:18:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x204) socket$inet_smc(0x2b, 0x1, 0x0) 07:18:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0x94, ""/148}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80200) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0x5, 0x5, 0xfb7f}, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x513841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="6766c7442400bad000006766c7442402c3e000006766c744240600000000670f0114240f01c3652e0f01c50f01df0fc79fd64cba210066ed260f73d30af36767260f22570f015805642e0f08", 0x4c}], 0x1, 0x24, &(0x7f0000000100), 0x0) 07:18:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x204) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x204) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) 07:18:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0x94, ""/148}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80200) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x80, 0x5, 0x5, 0xfb7f}, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x89, @local, 0x4e22, 0x4, 'lc\x00', 0x2b, 0x2, 0x14}, 0x2c) 07:18:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4a100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x952f, 0x284200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xff) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000880)=0xfd29) r4 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x200240) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r5, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xd0f, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f00000000c0)="994801c322b6fba5a922ad5e83a16624a96ddb4806", &(0x7f0000000100)=@buf="ca90cad26426f05e96a1b06b30e1eb7d01c3ee28ec359d7701dcfa70117c4a1132d9bf2686d1fa493d8f732495d107895e2e0b0a94876abc2ad4ba1a2e07a08e7313ee5c39c737592534294d5851cd008e1dad9afd7e631487aebbaf6872190957e84a44753600de48c542fbc60ee12f322576933b799df2239337d1a25c9bf30166d9225a78cb775ef23ffae66a8a92595f38da6cc8f77c64c66cde8bd9097b5f43731061e7715e7e80ad0bef4e40a6be65062f8bf7db7cb2d052ea1defac991bce34454a95e86fa58137751cda8628bb9187247e88f1cb894ac9e28450dcc15f4f", 0x4}, 0x20) 07:18:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4a100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x952f, 0x284200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xff) (async) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000880)=0xfd29) r4 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) (async) r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x200240) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r5, 0x20) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xd0f, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f00000000c0)="994801c322b6fba5a922ad5e83a16624a96ddb4806", &(0x7f0000000100)=@buf="ca90cad26426f05e96a1b06b30e1eb7d01c3ee28ec359d7701dcfa70117c4a1132d9bf2686d1fa493d8f732495d107895e2e0b0a94876abc2ad4ba1a2e07a08e7313ee5c39c737592534294d5851cd008e1dad9afd7e631487aebbaf6872190957e84a44753600de48c542fbc60ee12f322576933b799df2239337d1a25c9bf30166d9225a78cb775ef23ffae66a8a92595f38da6cc8f77c64c66cde8bd9097b5f43731061e7715e7e80ad0bef4e40a6be65062f8bf7db7cb2d052ea1defac991bce34454a95e86fa58137751cda8628bb9187247e88f1cb894ac9e28450dcc15f4f", 0x4}, 0x20) 07:18:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x204) socket$inet_smc(0x2b, 0x1, 0x0) 07:18:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) (async) 07:18:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) [ 2079.656459] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 07:18:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x89, @local, 0x4e22, 0x4, 'lc\x00', 0x2b, 0x2, 0x14}, 0x2c) 07:18:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f30f090fc77533440f20c066350e000000440f22c066b9170200000f32f64fb9ea3e0f01b4451d66b9640001c066b89100000066ba000000000f30813ef9ff27a066b9120b00000f3266b9800000c00f326635000800000f30", 0x59}], 0x1, 0x46, &(0x7f0000000100)=[@cstype0={0x4, 0x4}, @dstype0={0x6, 0xe}], 0x2) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4a100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x952f, 0x284200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xff) (async) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000880)=0xfd29) (async) r4 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) (async, rerun: 64) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) (async, rerun: 64) r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x200240) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r5, 0x20) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xd0f, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f00000000c0)="994801c322b6fba5a922ad5e83a16624a96ddb4806", &(0x7f0000000100)=@buf="ca90cad26426f05e96a1b06b30e1eb7d01c3ee28ec359d7701dcfa70117c4a1132d9bf2686d1fa493d8f732495d107895e2e0b0a94876abc2ad4ba1a2e07a08e7313ee5c39c737592534294d5851cd008e1dad9afd7e631487aebbaf6872190957e84a44753600de48c542fbc60ee12f322576933b799df2239337d1a25c9bf30166d9225a78cb775ef23ffae66a8a92595f38da6cc8f77c64c66cde8bd9097b5f43731061e7715e7e80ad0bef4e40a6be65062f8bf7db7cb2d052ea1defac991bce34454a95e86fa58137751cda8628bb9187247e88f1cb894ac9e28450dcc15f4f", 0x4}, 0x20) 07:18:13 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="670f50c2650fc75f00c0cb00c4e2f93313b93a1001c00f3265f0084ccae58fe9c801e10fc7be0d000000652e0f01cb9a110000002801", 0x36}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 07:18:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x89, @local, 0x4e22, 0x4, 'lc\x00', 0x2b, 0x2, 0x14}, 0x2c) 07:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) [ 2079.843136] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 07:18:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:13 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="670f50c2650fc75f00c0cb00c4e2f93313b93a1001c00f3265f0084ccae58fe9c801e10fc7be0d000000652e0f01cb9a110000002801", 0x36}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 07:18:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x89, @local, 0x4e22, 0x4, 'lc\x00', 0x2b, 0x2, 0x14}, 0x2c) [ 2079.959250] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 07:18:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f30f090fc77533440f20c066350e000000440f22c066b9170200000f32f64fb9ea3e0f01b4451d66b9640001c066b89100000066ba000000000f30813ef9ff27a066b9120b00000f3266b9800000c00f326635000800000f30", 0x59}], 0x1, 0x46, &(0x7f0000000100)=[@cstype0={0x4, 0x4}, @dstype0={0x6, 0xe}], 0x2) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f30f090fc77533440f20c066350e000000440f22c066b9170200000f32f64fb9ea3e0f01b4451d66b9640001c066b89100000066ba000000000f30813ef9ff27a066b9120b00000f3266b9800000c00f326635000800000f30", 0x59}], 0x1, 0x46, &(0x7f0000000100)=[@cstype0={0x4, 0x4}, @dstype0={0x6, 0xe}], 0x2) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) [ 2080.002409] misc userio: The device must be registered before sending interrupts 07:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) (async) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) (async) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) (async) timerfd_create(0x5, 0x80000) (async) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) (async) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) 07:18:13 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="670f50c2650fc75f00c0cb00c4e2f93313b93a1001c00f3265f0084ccae58fe9c801e10fc7be0d000000652e0f01cb9a110000002801", 0x36}], 0x1, 0x8, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="670f50c2650fc75f00c0cb00c4e2f93313b93a1001c00f3265f0084ccae58fe9c801e10fc7be0d000000652e0f01cb9a110000002801", 0x36}], 0x1, 0x8, &(0x7f0000000080), 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) 07:18:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) socket$inet(0x2, 0x3, 0x6) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) (async) 07:18:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x81) syz_open_dev$usbmon(&(0x7f0000000080), 0xe569, 0xc0001) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x101a00) syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x400040) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0xffffffffffffffff, 0x200) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) [ 2080.097210] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 07:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r2, 0x6) [ 2080.165800] misc userio: The device must be registered before sending interrupts 07:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket(0x29, 0x2, 0x10001) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) (async) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) (async) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) (async) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) (async) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) (async) timerfd_create(0x5, 0x80000) (async) accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) (async) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) (async) 07:18:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f30f090fc77533440f20c066350e000000440f22c066b9170200000f32f64fb9ea3e0f01b4451d66b9640001c066b89100000066ba000000000f30813ef9ff27a066b9120b00000f3266b9800000c00f326635000800000f30", 0x59}], 0x1, 0x46, &(0x7f0000000100)=[@cstype0={0x4, 0x4}, @dstype0={0x6, 0xe}], 0x2) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f30f090fc77533440f20c066350e000000440f22c066b9170200000f32f64fb9ea3e0f01b4451d66b9640001c066b89100000066ba000000000f30813ef9ff27a066b9120b00000f3266b9800000c00f326635000800000f30", 0x59}], 0x1, 0x46, &(0x7f0000000100)=[@cstype0={0x4, 0x4}, @dstype0={0x6, 0xe}], 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) 07:18:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) (async) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r2, 0x6) 07:18:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x81) syz_open_dev$usbmon(&(0x7f0000000080), 0xe569, 0xc0001) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x101a00) syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x400040) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0xffffffffffffffff, 0x200) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x81) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0xe569, 0xc0001) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x101a00) (async) syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x400040) (async) syz_open_dev$usbmon(&(0x7f0000000140), 0xffffffffffffffff, 0x200) (async) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) [ 2080.330790] misc userio: The device must be registered before sending interrupts 07:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r2, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) (async) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) (async) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x50, r2, 0x6) (async) 07:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x40800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0x100, 0x4b}, {@broadcast, 0x4e20, 0x3, 0x58, 0x5, 0xffff}}, 0x44) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) 07:18:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x81) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0xe569, 0xc0001) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x101a00) (async) syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x400040) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0xffffffffffffffff, 0x200) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc1a2722f6192996b, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) 07:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) 07:18:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x40800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0x100, 0x4b}, {@broadcast, 0x4e20, 0x3, 0x58, 0x5, 0xffff}}, 0x44) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x40800) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0x100, 0x4b}, {@broadcast, 0x4e20, 0x3, 0x58, 0x5, 0xffff}}, 0x44) (async) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) (async) [ 2080.558747] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 07:18:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:13 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x420840, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x210003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000640)=[{}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="64010100ac1414aa00000000060064"], 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x300, @local}, 0x0, {0x2, 0x4e23, @empty}, 'veth0_to_batadv\x00'}) 07:18:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) 07:18:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc1a2722f6192996b, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) [ 2080.741394] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 07:18:14 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x420840, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x210003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000640)=[{}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="64010100ac1414aa00000000060064"], 0x28) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x300, @local}, 0x0, {0x2, 0x4e23, @empty}, 'veth0_to_batadv\x00'}) (rerun: 32) 07:18:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x40800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0x100, 0x4b}, {@broadcast, 0x4e20, 0x3, 0x58, 0x5, 0xffff}}, 0x44) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x40800) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0x100, 0x4b}, {@broadcast, 0x4e20, 0x3, 0x58, 0x5, 0xffff}}, 0x44) (async) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) (async) 07:18:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) 07:18:14 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc1a2722f6192996b, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) [ 2080.932781] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 07:18:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) 07:18:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r1, 0x8) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x44c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x420840, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x210003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000640)=[{}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="64010100ac1414aa00000000060064"], 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x300, @local}, 0x0, {0x2, 0x4e23, @empty}, 'veth0_to_batadv\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x420840, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x210003, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000640)=[{}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) socket$inet(0x2, 0x3, 0x6) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="64010100ac1414aa00000000060064"], 0x28) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @remote}, {0x300, @local}, 0x0, {0x2, 0x4e23, @empty}, 'veth0_to_batadv\x00'}) (async) 07:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) (async) 07:18:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x4000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f00000001c0)=""/228, 0xe4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)="02a7058a1de03c5cb3b3881a052035f184bcf4d46528c2f1de38321245672f83ea9d56cb4e903944c119cd58e2") r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r1, 0x8) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x44c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r1, 0x8) (async) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x44c) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) 07:18:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 07:18:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000200)={r3, &(0x7f0000000140), &(0x7f0000000180)}) (async) 07:18:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r1, 0x8) (async) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x100010, r1, 0x44c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x4000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f00000001c0)=""/228, 0xe4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)="02a7058a1de03c5cb3b3881a052035f184bcf4d46528c2f1de38321245672f83ea9d56cb4e903944c119cd58e2") r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r0, 0x8) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0xd, 0x1}}, 0xe4, 0x10000, &(0x7f0000000040)="734e771d20bd837f7383b035379a5bd422358f38fa8f8492e001ca4110cd9c8f5042c5477b0a6317ccfce063cf75d5586927a492a7928c8b58438350a848845b183102f33bf723f687f36422876361205af1cb147f4e051f3c557292b61014377589a2d4d944f170c8034db4943b5c9053500f5c652b1f41cea81b7fc3b3ec32ca202b47c1dad350d49534b439df07fe8252a92a016bbe3597e538cf9d5ecf0162711ac30c9e173cf5140e250d00e6ae0c35c94ead2a085351967ee671a0a93728b7b50bc53f3b437b9b673c427afbbb6efb6a8e2e4beea12a5148b0c44ba96dedbf2620"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x101, 0x101800) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000001c0)=0x80000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200)=0xffffffff, 0x4) 07:18:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="650f01f6ba2000eddc7600b80b000f00d0ea07002800f30f2d0a2665362ef2670f234d66f30fc7700066b8010000000f01d90f01df", 0x35}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x685b1e6788ad46a3}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ff5000/0x1000)=nil, 0x1aaf, 0x4, 0xf3}) 07:18:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 07:18:14 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x4000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f00000001c0)=""/228, 0xe4}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)="02a7058a1de03c5cb3b3881a052035f184bcf4d46528c2f1de38321245672f83ea9d56cb4e903944c119cd58e2") (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r0, 0x8) (async) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0xd, 0x1}}, 0xe4, 0x10000, &(0x7f0000000040)="734e771d20bd837f7383b035379a5bd422358f38fa8f8492e001ca4110cd9c8f5042c5477b0a6317ccfce063cf75d5586927a492a7928c8b58438350a848845b183102f33bf723f687f36422876361205af1cb147f4e051f3c557292b61014377589a2d4d944f170c8034db4943b5c9053500f5c652b1f41cea81b7fc3b3ec32ca202b47c1dad350d49534b439df07fe8252a92a016bbe3597e538cf9d5ecf0162711ac30c9e173cf5140e250d00e6ae0c35c94ead2a085351967ee671a0a93728b7b50bc53f3b437b9b673c427afbbb6efb6a8e2e4beea12a5148b0c44ba96dedbf2620"}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x101, 0x101800) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000001c0)=0x80000000) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200)=0xffffffff, 0x4) 07:18:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 0: r0 = socket$inet(0x2, 0x0, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x2, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 07:18:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="650f01f6ba2000eddc7600b80b000f00d0ea07002800f30f2d0a2665362ef2670f234d66f30fc7700066b8010000000f01d90f01df", 0x35}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x685b1e6788ad46a3}], 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ff5000/0x1000)=nil, 0x1aaf, 0x4, 0xf3}) 07:18:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r0, 0x8) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0xd, 0x1}}, 0xe4, 0x10000, &(0x7f0000000040)="734e771d20bd837f7383b035379a5bd422358f38fa8f8492e001ca4110cd9c8f5042c5477b0a6317ccfce063cf75d5586927a492a7928c8b58438350a848845b183102f33bf723f687f36422876361205af1cb147f4e051f3c557292b61014377589a2d4d944f170c8034db4943b5c9053500f5c652b1f41cea81b7fc3b3ec32ca202b47c1dad350d49534b439df07fe8252a92a016bbe3597e538cf9d5ecf0162711ac30c9e173cf5140e250d00e6ae0c35c94ead2a085351967ee671a0a93728b7b50bc53f3b437b9b673c427afbbb6efb6a8e2e4beea12a5148b0c44ba96dedbf2620"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x101, 0x101800) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000001c0)=0x80000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200)=0xffffffff, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r0, 0x8) (async) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0xd, 0x1}}, 0xe4, 0x10000, &(0x7f0000000040)="734e771d20bd837f7383b035379a5bd422358f38fa8f8492e001ca4110cd9c8f5042c5477b0a6317ccfce063cf75d5586927a492a7928c8b58438350a848845b183102f33bf723f687f36422876361205af1cb147f4e051f3c557292b61014377589a2d4d944f170c8034db4943b5c9053500f5c652b1f41cea81b7fc3b3ec32ca202b47c1dad350d49534b439df07fe8252a92a016bbe3597e538cf9d5ecf0162711ac30c9e173cf5140e250d00e6ae0c35c94ead2a085351967ee671a0a93728b7b50bc53f3b437b9b673c427afbbb6efb6a8e2e4beea12a5148b0c44ba96dedbf2620"}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x101, 0x101800) (async) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000001c0)=0x80000000) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000200)=0xffffffff, 0x4) (async) 07:18:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x40800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x0, @empty, 0x4e21, 0x0, 'lblcr\x00', 0x8, 0x100, 0x4b}, {@broadcast, 0x4e20, 0x3, 0x58, 0x5, 0xffff}}, 0x44) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) 07:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:15 executing program 0: r0 = socket$inet(0x2, 0x0, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68981, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="650f01f6ba2000eddc7600b80b000f00d0ea07002800f30f2d0a2665362ef2670f234d66f30fc7700066b8010000000f01d90f01df", 0x35}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x685b1e6788ad46a3}], 0x1) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ff5000/0x1000)=nil, 0x1aaf, 0x4, 0xf3}) [ 2082.058132] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 07:18:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fa2c021b10f0173020f01cb3e360f005b000f01c3f30fc7369aecf3363ef00fc04f006766c74424000c0000006766c7442402a54800006766c744240600000000670f011c24ab", 0x47}], 0x1, 0x8, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x0, 0xd3}, @flags={0x3, 0x100000}], 0x2) 07:18:15 executing program 0: r0 = socket$inet(0x2, 0x0, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68981, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68981, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) 07:18:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fa2c021b10f0173020f01cb3e360f005b000f01c3f30fc7369aecf3363ef00fc04f006766c74424000c0000006766c7442402a54800006766c744240600000000670f011c24ab", 0x47}], 0x1, 0x8, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x0, 0xd3}, @flags={0x3, 0x100000}], 0x2) 07:18:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fa2c021b10f0173020f01cb3e360f005b000f01c3f30fc7369aecf3363ef00fc04f006766c74424000c0000006766c7442402a54800006766c744240600000000670f011c24ab", 0x47}], 0x1, 0x8, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x0, 0xd3}, @flags={0x3, 0x100000}], 0x2) 07:18:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68981, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68981, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) [ 2082.443033] misc userio: The device must be registered before sending interrupts 07:18:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) 07:18:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fa2c021b10f0173020f01cb3e360f005b000f01c3f30fc7369aecf3363ef00fc04f006766c74424000c0000006766c7442402a54800006766c744240600000000670f011c24ab", 0x47}], 0x1, 0x8, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x0, 0xd3}, @flags={0x3, 0x100000}], 0x2) 07:18:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000003}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:18:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f30f090fc77533440f20c066350e000000440f22c066b9170200000f32f64fb9ea3e0f01b4451d66b9640001c066b89100000066ba000000000f30813ef9ff27a066b9120b00000f3266b9800000c00f326635000800000f30", 0x59}], 0x1, 0x46, &(0x7f0000000100)=[@cstype0={0x4, 0x4}, @dstype0={0x6, 0xe}], 0x2) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) [ 2083.169658] misc userio: The device must be registered before sending interrupts 07:18:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x36) 07:18:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) sendto$inet(r4, &(0x7f00000001c0)="4e25602ff6e78e7fcd41353267d6f8d32cea222a2fd71bba387ecd6edd3aaecad51dad1457cb15b0109c18b5c49347b4f4dae59f12e0d5", 0x37, 0x20000000, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) 07:18:16 executing program 0: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:16 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4a100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x952f, 0x284200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xff) r3 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000880)=0xfd29) r4 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x200240) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r5, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xd0f, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f00000000c0)="994801c322b6fba5a922ad5e83a16624a96ddb4806", &(0x7f0000000100)=@buf="ca90cad26426f05e96a1b06b30e1eb7d01c3ee28ec359d7701dcfa70117c4a1132d9bf2686d1fa493d8f732495d107895e2e0b0a94876abc2ad4ba1a2e07a08e7313ee5c39c737592534294d5851cd008e1dad9afd7e631487aebbaf6872190957e84a44753600de48c542fbc60ee12f322576933b799df2239337d1a25c9bf30166d9225a78cb775ef23ffae66a8a92595f38da6cc8f77c64c66cde8bd9097b5f43731061e7715e7e80ad0bef4e40a6be65062f8bf7db7cb2d052ea1defac991bce34454a95e86fa58137751cda8628bb9187247e88f1cb894ac9e28450dcc15f4f", 0x4}, 0x20) [ 2083.360093] misc userio: The device must be registered before sending interrupts 07:18:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 07:18:16 executing program 0: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) [ 2083.517582] misc userio: The device must be registered before sending interrupts 07:18:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000003}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) (async) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000003}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) 07:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) (async) sendto$inet(r4, &(0x7f00000001c0)="4e25602ff6e78e7fcd41353267d6f8d32cea222a2fd71bba387ecd6edd3aaecad51dad1457cb15b0109c18b5c49347b4f4dae59f12e0d5", 0x37, 0x20000000, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) 07:18:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:17 executing program 0: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:17 executing program 3: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000040), 0x2) 07:18:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 07:18:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000003}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) (async) sendto$inet(r4, &(0x7f00000001c0)="4e25602ff6e78e7fcd41353267d6f8d32cea222a2fd71bba387ecd6edd3aaecad51dad1457cb15b0109c18b5c49347b4f4dae59f12e0d5", 0x37, 0x20000000, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) [ 2084.125276] misc userio: The device must be registered before sending interrupts 07:18:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 07:18:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 07:18:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000003}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) (async) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001480)) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000003}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) 07:18:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60982, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 07:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 07:18:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) r5 = accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0x52, [0x80000000, 0x1, 0x20, 0x1, 0x40, 0x44d9402], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/82}, &(0x7f0000000540)=0x78) 07:18:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x2f8, 0x2f8, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000580), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac, @multicast1, @private=0xa010102, 0x8, 0xffffffff}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x6, 0x10, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x7ff, 0x5, 0xff, 0x100, 0x6, 'netdevsim0\x00', 'syzkaller0\x00', {}, {0xc1bf5a75cb428532}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xd80b, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xb, {@mac=@local, {[0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1ff, 0x7f, 0x6e66, 0x9, 0x8, 0x6, 'ip6tnl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x343}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d67983999693", @empty, @private=0xa010100, @broadcast, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) 07:18:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 07:18:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x103fe, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 07:18:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60982, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 07:18:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) accept4$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x80000) 07:18:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x3, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0xfff, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x103fe, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 07:18:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) timerfd_create(0x5, 0x80000) 07:18:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60982, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60982, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) 07:18:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000"], 0x78) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x400, 0x110, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @loopback, 0xff, 0xffffff00, 0x7, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0x4, 0x5, 0xb9, 0x3, 'pim6reg0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @empty, 0x2}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 0xc, 0xd, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x50, 0x20, 0x0, 0x0, 0x57, 'veth1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x2c4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "349848b943e7e45072449304f220204f29d94f62ba0fca5f2e3ee3a8b79d"}}, {{@arp={@local, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00, 0xffffff00, 0xc, 0xf, {@mac=@random="110d7b5e5ff2", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x4, 0xfc01, 0x8000, 0x100, 0x1, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x1a}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xdc76, {0x1}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 07:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)=0x1) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) 07:18:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) 07:18:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) 07:18:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000"], 0x78) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x400, 0x110, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @loopback, 0xff, 0xffffff00, 0x7, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0x4, 0x5, 0xb9, 0x3, 'pim6reg0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @empty, 0x2}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 0xc, 0xd, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x50, 0x20, 0x0, 0x0, 0x57, 'veth1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x2c4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "349848b943e7e45072449304f220204f29d94f62ba0fca5f2e3ee3a8b79d"}}, {{@arp={@local, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00, 0xffffff00, 0xc, 0xf, {@mac=@random="110d7b5e5ff2", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x4, 0xfc01, 0x8000, 0x100, 0x1, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x1a}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xdc76, {0x1}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 07:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async, rerun: 64) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (rerun: 64) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0xff, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x1fe, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000"], 0x78) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x400, 0x110, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @loopback, 0xff, 0xffffff00, 0x7, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0x4, 0x5, 0xb9, 0x3, 'pim6reg0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @empty, 0x2}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 0xc, 0xd, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x50, 0x20, 0x0, 0x0, 0x57, 'veth1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x2c4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "349848b943e7e45072449304f220204f29d94f62ba0fca5f2e3ee3a8b79d"}}, {{@arp={@local, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00, 0xffffff00, 0xc, 0xf, {@mac=@random="110d7b5e5ff2", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x4, 0xfc01, 0x8000, 0x100, 0x1, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x1a}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xdc76, {0x1}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 07:18:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x29, 0x2, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040)=0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5]}, &(0x7f00000002c0)=0x78) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)=0x1) 07:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) 07:18:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2980, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x2) 07:18:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) (async) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x58d376569fad2dfa, 0x80, 0xeb, 0x40, 0x7, 0x1, 0x0, 0x3, 0x20061, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x5}, 0x12, 0x9, 0x0, 0x6, 0x5, 0x1ff, 0x1, 0x0, 0x923, 0x0, 0x800}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x36adf2109d02b154, r2, 0x1a) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) 07:18:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xed63d4102536d2c9, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmget(0x1, 0x2000, 0x6ad764e3ad16038c, &(0x7f0000ffe000/0x2000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) (async) pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xed63d4102536d2c9, r1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmget(0x1, 0x2000, 0x6ad764e3ad16038c, &(0x7f0000ffe000/0x2000)=nil) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x58d376569fad2dfa, 0x80, 0xeb, 0x40, 0x7, 0x1, 0x0, 0x3, 0x20061, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x5}, 0x12, 0x9, 0x0, 0x6, 0x5, 0x1ff, 0x1, 0x0, 0x923, 0x0, 0x800}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x36adf2109d02b154, r2, 0x1a) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2980, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x2) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x58d376569fad2dfa, 0x80, 0xeb, 0x40, 0x7, 0x1, 0x0, 0x3, 0x20061, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x5}, 0x12, 0x9, 0x0, 0x6, 0x5, 0x1ff, 0x1, 0x0, 0x923, 0x0, 0x800}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x36adf2109d02b154, r2, 0x1a) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xed63d4102536d2c9, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmget(0x1, 0x2000, 0x6ad764e3ad16038c, &(0x7f0000ffe000/0x2000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) (async) pkey_alloc(0x0, 0x2) (async) pkey_alloc(0x0, 0x0) (async) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xed63d4102536d2c9, r1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) shmget(0x1, 0x2000, 0x6ad764e3ad16038c, &(0x7f0000ffe000/0x2000)=nil) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) 07:18:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2980, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x2) 07:18:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000040)="36daf754bc5e046908de734653aa030b662ac5f2269b2772f0a415549e100db3e7dd75a376a60f3349e27d6ed39839a3c72bbb272ae6eda850694a9180f38990c22ee1c8e3488964a44a8faa17f78f1821840992b579115446010d73efa2c69c4ee61703a39c722395ab684d50cb3ff91d1f92e7a228e07014a1a8dd536c86e9bb52e0d9233b60a53584fa88ddb3f4e91b8528f4fa620aa242634dbf4a05f7ac97bc00aca980f041068d3fcb34d49bfb86bb91a189fe565dfa8713b3259e3fe8d53396cd9f5760d6ed63abeafb36bac7027609b5b7e9774f0038df096eead57da11b4e8ace0d07ada46d5ef99b60d5d3") 07:18:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:19 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x0, @rand_addr=0x64010100, 0x4e22, 0x0, 'wrr\x00', 0x3, 0x5, 0x10}, {@multicast2, 0x4e21, 0x4, 0xfed, 0x1}}, 0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000040)="36daf754bc5e046908de734653aa030b662ac5f2269b2772f0a415549e100db3e7dd75a376a60f3349e27d6ed39839a3c72bbb272ae6eda850694a9180f38990c22ee1c8e3488964a44a8faa17f78f1821840992b579115446010d73efa2c69c4ee61703a39c722395ab684d50cb3ff91d1f92e7a228e07014a1a8dd536c86e9bb52e0d9233b60a53584fa88ddb3f4e91b8528f4fa620aa242634dbf4a05f7ac97bc00aca980f041068d3fcb34d49bfb86bb91a189fe565dfa8713b3259e3fe8d53396cd9f5760d6ed63abeafb36bac7027609b5b7e9774f0038df096eead57da11b4e8ace0d07ada46d5ef99b60d5d3") 07:18:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 4: timerfd_create(0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:20 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x0, @rand_addr=0x64010100, 0x4e22, 0x0, 'wrr\x00', 0x3, 0x5, 0x10}, {@multicast2, 0x4e21, 0x4, 0xfed, 0x1}}, 0x44) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) [ 2086.920579] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:20 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000040)="36daf754bc5e046908de734653aa030b662ac5f2269b2772f0a415549e100db3e7dd75a376a60f3349e27d6ed39839a3c72bbb272ae6eda850694a9180f38990c22ee1c8e3488964a44a8faa17f78f1821840992b579115446010d73efa2c69c4ee61703a39c722395ab684d50cb3ff91d1f92e7a228e07014a1a8dd536c86e9bb52e0d9233b60a53584fa88ddb3f4e91b8528f4fa620aa242634dbf4a05f7ac97bc00aca980f041068d3fcb34d49bfb86bb91a189fe565dfa8713b3259e3fe8d53396cd9f5760d6ed63abeafb36bac7027609b5b7e9774f0038df096eead57da11b4e8ace0d07ada46d5ef99b60d5d3") 07:18:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x2c081) 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:20 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x0, @rand_addr=0x64010100, 0x4e22, 0x0, 'wrr\x00', 0x3, 0x5, 0x10}, {@multicast2, 0x4e21, 0x4, 0xfed, 0x1}}, 0x44) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) [ 2087.104690] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:20 executing program 4: timerfd_create(0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) timerfd_create(0x4, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:20 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xab\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0805}, 0x808c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:20 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x2c081) 07:18:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) [ 2087.244361] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.270636] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:20 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xab\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0805}, 0x808c) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) [ 2087.308937] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:20 executing program 4: timerfd_create(0x4, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) [ 2087.355560] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:20 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xab\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0805}, 0x808c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xab\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0805}, 0x808c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) 07:18:20 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x2c081) [ 2087.396922] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.435492] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.463151] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.490488] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.512655] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.534403] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.543233] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.551033] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.557350] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.566136] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.574731] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.583728] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.592962] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.607601] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.616369] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.624768] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.634492] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.642971] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.651876] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.660481] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.669491] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.678149] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.686648] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.692790] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.702610] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 07:18:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x228100) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:20 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = socket(0x36, 0x800, 0x8000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@delpolicy={0x294, 0x14, 0x200, 0x70bd2a, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4, 0xff, 0x4e21, 0xfc01, 0x0, 0x80, 0xa0, 0x5e}, 0x6e6bbd, 0x1}, [@lifetime_val={0x24, 0x9, {0xbc20, 0x6, 0xfffffffffffffc01, 0xffff}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x43}}, @algo_aead={0x5e, 0x12, {{'morus1280\x00'}, 0x90, 0x200, "bb62f34cae7609d961025ad72f2b4b5034fc"}}, @coaddr={0x14, 0xe, @in=@remote}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xff}, @replay_thresh={0x8, 0xb, 0x9}, @algo_aead={0x8e, 0x12, {{'rfc7539(cbc-serpent-avx,sha384-arm64)\x00'}, 0x210, 0x80, "dff03bd60ef7480d38832c015df80fa3f6ef9ac3b0ed8c58995ef7f06deb408f31ea51644142a354155d0b41a0e26e655090ac23172ba29b93e4811c5c01825e2900"}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0xfff9, 0x4e23, 0x6, 0xa, 0x80, 0x0, 0xff, r3, 0xee01}, {@in=@multicast2, 0x4d2}, @in=@local, {0x80000000, 0x8, 0x5, 0x6, 0x8, 0xc16, 0xffff}, {0xcde7, 0x7, 0x0, 0x10001}, {0x7fffffff, 0x10000, 0x9}, 0x70bd28, 0x3503, 0xa, 0x1, 0x21, 0xc}}]}, 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 2087.714496] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.723572] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.734688] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 2087.741800] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async, rerun: 64) r2 = socket(0x36, 0x800, 0x8000) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@delpolicy={0x294, 0x14, 0x200, 0x70bd2a, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4, 0xff, 0x4e21, 0xfc01, 0x0, 0x80, 0xa0, 0x5e}, 0x6e6bbd, 0x1}, [@lifetime_val={0x24, 0x9, {0xbc20, 0x6, 0xfffffffffffffc01, 0xffff}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x43}}, @algo_aead={0x5e, 0x12, {{'morus1280\x00'}, 0x90, 0x200, "bb62f34cae7609d961025ad72f2b4b5034fc"}}, @coaddr={0x14, 0xe, @in=@remote}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xff}, @replay_thresh={0x8, 0xb, 0x9}, @algo_aead={0x8e, 0x12, {{'rfc7539(cbc-serpent-avx,sha384-arm64)\x00'}, 0x210, 0x80, "dff03bd60ef7480d38832c015df80fa3f6ef9ac3b0ed8c58995ef7f06deb408f31ea51644142a354155d0b41a0e26e655090ac23172ba29b93e4811c5c01825e2900"}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0xfff9, 0x4e23, 0x6, 0xa, 0x80, 0x0, 0xff, r3, 0xee01}, {@in=@multicast2, 0x4d2}, @in=@local, {0x80000000, 0x8, 0x5, 0x6, 0x8, 0xc16, 0xffff}, {0xcde7, 0x7, 0x0, 0x10001}, {0x7fffffff, 0x10000, 0x9}, 0x70bd28, 0x3503, 0xa, 0x1, 0x21, 0xc}}]}, 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 07:18:21 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x228100) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:21 executing program 3: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x2c081) 07:18:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x228100) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x228100) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) 07:18:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = socket(0x36, 0x800, 0x8000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@delpolicy={0x294, 0x14, 0x200, 0x70bd2a, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4, 0xff, 0x4e21, 0xfc01, 0x0, 0x80, 0xa0, 0x5e}, 0x6e6bbd, 0x1}, [@lifetime_val={0x24, 0x9, {0xbc20, 0x6, 0xfffffffffffffc01, 0xffff}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x43}}, @algo_aead={0x5e, 0x12, {{'morus1280\x00'}, 0x90, 0x200, "bb62f34cae7609d961025ad72f2b4b5034fc"}}, @coaddr={0x14, 0xe, @in=@remote}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xff}, @replay_thresh={0x8, 0xb, 0x9}, @algo_aead={0x8e, 0x12, {{'rfc7539(cbc-serpent-avx,sha384-arm64)\x00'}, 0x210, 0x80, "dff03bd60ef7480d38832c015df80fa3f6ef9ac3b0ed8c58995ef7f06deb408f31ea51644142a354155d0b41a0e26e655090ac23172ba29b93e4811c5c01825e2900"}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0xfff9, 0x4e23, 0x6, 0xa, 0x80, 0x0, 0xff, r3, 0xee01}, {@in=@multicast2, 0x4d2}, @in=@local, {0x80000000, 0x8, 0x5, 0x6, 0x8, 0xc16, 0xffff}, {0xcde7, 0x7, 0x0, 0x10001}, {0x7fffffff, 0x10000, 0x9}, 0x70bd28, 0x3503, 0xa, 0x1, 0x21, 0xc}}]}, 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x228100) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:21 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x2c081) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x2c081) 07:18:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f06660f1b05baf80c66b821bd468c66efbafc0cec0f6586f6b766b9800000c00f326635010000000f3036f30f09baa000b8ed1fef26362e64f6862fffb1640fe30b0f06", 0x44}], 0x1, 0x40, &(0x7f0000000100)=[@flags={0x3, 0x4}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffd}], 0x2) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408482, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/210, 0xd2, 0x0, &(0x7f00000002c0)=""/183, 0xb7}}, 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000002) 07:18:21 executing program 3: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 2: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f06660f1b05baf80c66b821bd468c66efbafc0cec0f6586f6b766b9800000c00f326635010000000f3036f30f09baa000b8ed1fef26362e64f6862fffb1640fe30b0f06", 0x44}], 0x1, 0x40, &(0x7f0000000100)=[@flags={0x3, 0x4}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffd}], 0x2) 07:18:21 executing program 3: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 3: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:21 executing program 2: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408482, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/210, 0xd2, 0x0, &(0x7f00000002c0)=""/183, 0xb7}}, 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408482, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42101, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/210, 0xd2, 0x0, &(0x7f00000002c0)=""/183, 0xb7}}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000002) (async) 07:18:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f06660f1b05baf80c66b821bd468c66efbafc0cec0f6586f6b766b9800000c00f326635010000000f3036f30f09baa000b8ed1fef26362e64f6862fffb1640fe30b0f06", 0x44}], 0x1, 0x40, &(0x7f0000000100)=[@flags={0x3, 0x4}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffd}], 0x2) 07:18:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 3: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 07:18:21 executing program 2: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408482, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/210, 0xd2, 0x0, &(0x7f00000002c0)=""/183, 0xb7}}, 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408482, 0x0) (async) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) (async) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42101, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/210, 0xd2, 0x0, &(0x7f00000002c0)=""/183, 0xb7}}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4000002) (async) 07:18:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xed63d4102536d2c9, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmget(0x1, 0x2000, 0x6ad764e3ad16038c, &(0x7f0000ffe000/0x2000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) 07:18:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x29, 0x2, 0x10001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x40, '\x00', 0x1, 0x10}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2c081) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)=0x1) 07:18:21 executing program 2: r0 = socket$inet(0x2, 0x0, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x10, 0x4, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000"], 0x78) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x400, 0x110, 0x0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000080), {[{{@arp={@remote, @loopback, 0xff, 0xffffff00, 0x7, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0x4, 0x5, 0xb9, 0x3, 'pim6reg0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @empty, 0x2}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 0xc, 0xd, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x50, 0x20, 0x0, 0x0, 0x57, 'veth1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x2c4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "349848b943e7e45072449304f220204f29d94f62ba0fca5f2e3ee3a8b79d"}}, {{@arp={@local, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffff00, 0xffffff00, 0xc, 0xf, {@mac=@random="110d7b5e5ff2", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x4, 0xfc01, 0x8000, 0x100, 0x1, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x1a}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xdc76, {0x1}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 07:18:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9b10b0000b80c000000ba000000000f30f3450f5b71dec482f923f3f30f0966baf80cb858f1df84ef66bafc0ced660fc7700048b810a8fc60000000000f23c00f21f835030005000f23f8672e0f01c8b805000000b94b0000000f01d936400f01ca", 0x62}], 0x1, 0x40, &(0x7f0000000100)=[@cstype0={0x4, 0x1}], 0x1) 07:18:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000000006) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:21 executing program 2: r0 = socket$inet(0x2, 0x0, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:21 executing program 4: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x60d, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'vlan1\x00'}) r0 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fff, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x50000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r6 = socket$inet(0x2, 0x80000, 0x9) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @loopback}, {0x1, @broadcast}, 0x10, {0x2, 0x4e20, @remote}, 'bond_slave_0\x00'}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r7, 0x8) read$usbfs(r7, &(0x7f0000000040)=""/36, 0x24) 07:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0xa361, 0xc, [{0xc, 0x1}, {0xf, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3}, {0xa}, {}, {0xf, 0x1}, {0xe}, {0x0, 0x1}]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x0, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181180, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="baf80c66b8581e998166efbafc0ced66b9ea09000066b84026093d66ba000000000f300f637d583ed9fc26c92e0f01d8f20f2abb603f360f01cab818008ed00f01ca", 0x42}], 0x1, 0x11, &(0x7f0000000140), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff3000/0x1000)=nil, 0x1000, &(0x7f0000000140)='[@@:}(*\x00') ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = timerfd_create(0x3, 0x80000) timerfd_gettime(r7, &(0x7f0000000040)) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0xa361, 0xc, [{0xc, 0x1}, {0xf, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3}, {0xa}, {}, {0xf, 0x1}, {0xe}, {0x0, 0x1}]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0xa361, 0xc, [{0xc, 0x1}, {0xf, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3}, {0xa}, {}, {0xf, 0x1}, {0xe}, {0x0, 0x1}]}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) 07:18:22 executing program 4: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x60d, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'vlan1\x00'}) (async) r0 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fff, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x50000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r6 = socket$inet(0x2, 0x80000, 0x9) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @loopback}, {0x1, @broadcast}, 0x10, {0x2, 0x4e20, @remote}, 'bond_slave_0\x00'}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r7, 0x8) read$usbfs(r7, &(0x7f0000000040)=""/36, 0x24) 07:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_getres(0x0, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x6, 0x10}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/64, 0x40, 0x1, &(0x7f00000001c0)=""/218, 0xda}, &(0x7f0000000100)=0x40) 07:18:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"65dda4ecab9410213e2940dc12d4cf3864f29e8a4beeeae895f8204d072dbd6f876f14dbfdc4ca02a323ee3d97233b351903a75edf623d0770ba6a87cc1aa1df"}, {&(0x7f0000000040)=@adf_dec={@normal='NumberDcInstances\x00', {0x5}}}}}, {&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000280)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x4}, {&(0x7f00000001c0)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x7}}}}}}}}}, 0x6}) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0xa361, 0xc, [{0xc, 0x1}, {0xf, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3}, {0xa}, {}, {0xf, 0x1}, {0xe}, {0x0, 0x1}]}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {"65dda4ecab9410213e2940dc12d4cf3864f29e8a4beeeae895f8204d072dbd6f876f14dbfdc4ca02a323ee3d97233b351903a75edf623d0770ba6a87cc1aa1df"}, {&(0x7f0000000040)=@adf_dec={@normal='NumberDcInstances\x00', {0x5}}}}}, {&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000280)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x4}, {&(0x7f00000001c0)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x7}}}}}}}}}, 0x6}) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 07:18:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$inet(0x2, 0x80000, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000001c0)={0x3, {{0x2, 0x4e20, @empty}}}, 0x88) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:22 executing program 2: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 4: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x60d, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'vlan1\x00'}) r0 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fff, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x50000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r6 = socket$inet(0x2, 0x80000, 0x9) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @loopback}, {0x1, @broadcast}, 0x10, {0x2, 0x4e20, @remote}, 'bond_slave_0\x00'}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r7, 0x8) read$usbfs(r7, &(0x7f0000000040)=""/36, 0x24) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x60d, @remote}, 0x8, {0x2, 0x4e23, @loopback}, 'vlan1\x00'}) (async) socket(0x28, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fff, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x50000000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) (async) socket$inet(0x2, 0x80000, 0x9) (async) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @loopback}, {0x1, @broadcast}, 0x10, {0x2, 0x4e20, @remote}, 'bond_slave_0\x00'}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r7, 0x8) (async) read$usbfs(r7, &(0x7f0000000040)=""/36, 0x24) (async) 07:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) (async) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 07:18:22 executing program 2: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 07:18:22 executing program 2: socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 07:18:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) 07:18:22 executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x3}, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = mq_open(&(0x7f00000000c0)=')\x00', 0x0, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000240)={0x0, 0x1f}, 0x2) mq_timedreceive(r2, &(0x7f0000000140)=""/155, 0x9b, 0x0, 0x0) mq_getsetattr(r2, &(0x7f00000000c0)={0x9, 0x6, 0x9, 0x8001}, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 07:18:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) (async) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) (async) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) (async) 07:18:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 07:18:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 07:18:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'macvtap0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000100)={0x8, &(0x7f00000011c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @broadcast}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/4096, 0xe31}) 07:18:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x3, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 07:18:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:23 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001380)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f0000000240)="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", &(0x7f0000001240)=""/245}, 0x20) r3 = mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) mq_timedsend(r3, &(0x7f00000000c0)="f88a1a0150cd37b6593df79c0d4e905015bdc59826846373ae9afd831e56cab37d6fba24600e980b1714a37331b2ee7ac8471718a9e58ed70eb3d081785f45e8e859ae94185f3707fba7fef2052a79fbe261d3f73de4899e65c95cb3608d7bbcb4cef14318799b86d4972bb66e6963fef8822108fbbc589da202d8779aaff61ec4c50bff165525389aa29e11b6793ef81791e2b51f751283d4b681e8dd2b77c78b432871feaa1f4e625a39613f65b432b771c023e291db9c91e73bac6bcb243d4e", 0xc1, 0x101, &(0x7f0000000200)={0x0, 0x989680}) 07:18:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x81, "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"}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r4, 0x8) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000200)) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 07:18:23 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001380)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f0000000240)="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", &(0x7f0000001240)=""/245}, 0x20) r3 = mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) mq_timedsend(r3, &(0x7f00000000c0)="f88a1a0150cd37b6593df79c0d4e905015bdc59826846373ae9afd831e56cab37d6fba24600e980b1714a37331b2ee7ac8471718a9e58ed70eb3d081785f45e8e859ae94185f3707fba7fef2052a79fbe261d3f73de4899e65c95cb3608d7bbcb4cef14318799b86d4972bb66e6963fef8822108fbbc589da202d8779aaff61ec4c50bff165525389aa29e11b6793ef81791e2b51f751283d4b681e8dd2b77c78b432871feaa1f4e625a39613f65b432b771c023e291db9c91e73bac6bcb243d4e", 0xc1, 0x101, &(0x7f0000000200)={0x0, 0x989680}) 07:18:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000feb000/0x14000)=nil, 0x14000}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 07:18:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'macvtap0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000100)={0x8, &(0x7f00000011c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @broadcast}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/4096, 0xe31}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'macvtap0\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000100)={0x8, &(0x7f00000011c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @broadcast}]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/4096, 0xe31}) (async) 07:18:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 07:18:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:23 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001380)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f0000000240)="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", &(0x7f0000001240)=""/245}, 0x20) r3 = mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) mq_timedsend(r3, &(0x7f00000000c0)="f88a1a0150cd37b6593df79c0d4e905015bdc59826846373ae9afd831e56cab37d6fba24600e980b1714a37331b2ee7ac8471718a9e58ed70eb3d081785f45e8e859ae94185f3707fba7fef2052a79fbe261d3f73de4899e65c95cb3608d7bbcb4cef14318799b86d4972bb66e6963fef8822108fbbc589da202d8779aaff61ec4c50bff165525389aa29e11b6793ef81791e2b51f751283d4b681e8dd2b77c78b432871feaa1f4e625a39613f65b432b771c023e291db9c91e73bac6bcb243d4e", 0xc1, 0x101, &(0x7f0000000200)={0x0, 0x989680}) 07:18:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:23 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001380)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f0000000240)="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", &(0x7f0000001240)=""/245}, 0x20) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x81, "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"}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r4, 0x8) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000200)) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 07:18:23 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000feb000/0x14000)=nil, 0x14000}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000feb000/0x14000)=nil, 0x14000}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) 07:18:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'macvtap0\x00'}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000100)={0x8, &(0x7f00000011c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @broadcast}]}) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/4096, 0xe31}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001380)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x8}, 0xc) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001380)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff4000/0x1000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x139880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="03150f01c8260f01cfbaf80c66b89091688266efbafc0ced66b9800000c00f326635002000000f3066b94809000066b82de3309366ba000000000f30f40faea4f600360f21980f011e0000", 0x4b}], 0x1, 0x41, &(0x7f0000000100)=[@cr4={0x1, 0x224026}, @flags={0x3, 0x230000}], 0x2) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000feb000/0x14000)=nil, 0x14000}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) userfaultfd(0x0) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) (async) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000feb000/0x14000)=nil, 0x14000}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x604300, 0x0) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x139880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="03150f01c8260f01cfbaf80c66b89091688266efbafc0ced66b9800000c00f326635002000000f3066b94809000066b82de3309366ba000000000f30f40faea4f600360f21980f011e0000", 0x4b}], 0x1, 0x41, &(0x7f0000000100)=[@cr4={0x1, 0x224026}, @flags={0x3, 0x230000}], 0x2) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x139880, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="03150f01c8260f01cfbaf80c66b89091688266efbafc0ced66b9800000c00f326635002000000f3066b94809000066b82de3309366ba000000000f30f40faea4f600360f21980f011e0000", 0x4b}], 0x1, 0x41, &(0x7f0000000100)=[@cr4={0x1, 0x224026}, @flags={0x3, 0x230000}], 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) 07:18:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff, 0xff]}}, 0x2000, 0x0, 0x8001, 0x3ff, 0x8000, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000feb000/0x14000)=nil, 0x14000}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 07:18:24 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000040)={0x81, "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"}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r4, 0x8) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000200)) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 07:18:24 executing program 3: mq_open(0x0, 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x342}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x139880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="03150f01c8260f01cfbaf80c66b89091688266efbafc0ced66b9800000c00f326635002000000f3066b94809000066b82de3309366ba000000000f30f40faea4f600360f21980f011e0000", 0x4b}], 0x1, 0x41, &(0x7f0000000100)=[@cr4={0x1, 0x224026}, @flags={0x3, 0x230000}], 0x2) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:24 executing program 3: mq_open(0x0, 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x4}, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:24 executing program 3: mq_open(0x0, 0x40, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f20e06635020000000f22e00f01c4f30faee70f20d89aac00fa00660f38399508000f01c40f01f00f01ca0f01f5", 0x2e}], 0x1, 0x12, &(0x7f0000000180)=[@flags={0x3, 0xc0000}], 0x1) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x84, @empty, 0x4e21, 0x0, 'dh\x00', 0x19, 0x5, 0xe}, 0x2c) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="0234969db9b307aad3b955dbb8b5689fcbbd1bfcaf3b5fc05925f24e0d49dc4cfe759e54aec889d851510d333268e4db58d72ec7f74d9db58e10d6c284a511c80aa67130ac44df294432b724502cbc1b0e25f886f70ee3d04d22479626b7b78cebbdde86790df5503baf33", 0x6b, 0x2000c000, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) [ 2091.409731] misc userio: The device must be registered before sending interrupts 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x0, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 0: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000000)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000240)={r2, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f0000000080)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x0, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x4}, 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x220, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'bond_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="27126a0dddff", @empty, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2b0c895c63937c2b476727aba47d3bc868458ef3d88415e1f17c5f43bb19a5a6e6cf3a0ac505647614843d1d74d7658ec84fe78ee9ff24068e2e108963ee2832"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 07:18:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:24 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x0, 0x180, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0xa0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c74424000b000000c7442402d4000000c7442406000000000f011c240f3066ba210066b8030066eff2d9e5c4022d925c2700642e0f019c3807000000400f01d166b8c4000f00d848b8d28e0000000000000f23c80f21f8350000c0000f23f866baf80cb8f834eb86ef66bafc0c66ed", 0x6f}], 0x1, 0x42, &(0x7f0000000140)=[@cstype3={0x5, 0x6}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:24 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x3, 0x2, 0x0, 0x20}) 07:18:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0xa0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c74424000b000000c7442402d4000000c7442406000000000f011c240f3066ba210066b8030066eff2d9e5c4022d925c2700642e0f019c3807000000400f01d166b8c4000f00d848b8d28e0000000000000f23c80f21f8350000c0000f23f866baf80cb8f834eb86ef66bafc0c66ed", 0x6f}], 0x1, 0x42, &(0x7f0000000140)=[@cstype3={0x5, 0x6}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) [ 2091.669960] misc userio: The device must be registered before sending interrupts 07:18:24 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x4}, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, 0x0) 07:18:25 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, 0x0) 07:18:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x44082, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x4800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) userfaultfd(0x800) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000040)=0x823, 0x4) [ 2091.823077] misc userio: The device must be registered before sending interrupts 07:18:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:25 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="fab2184ef35b84c595e44f57ba99dbfe358562b1b4e22fba1251e85c6980aa3005fb503c58519fb038a4e2a97c1f07f2fc396a4b7bbc1df57dbcc590ccee2e10dbadcb269756430a7b863307576184f03209cd68601f3ac7906e4f21f3f908751b782b32ec45ea12a1192b4e4ae3de1c0c595476adf0477622a801285f7b4d055c9c72f7e7b13dc2409f0c3a02e4bdc8eb5e0391ab9db4d3383c") r3 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001280)=ANY=[@ANYRES32=r4, @ANYBLOB="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"]) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) nanosleep(&(0x7f0000000180), &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x736f45748595091f, 0x4010, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000100)) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, 0x0) 07:18:25 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x2000) read$usbfs(r8, &(0x7f00000000c0)=""/114, 0x72) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x0, 0x4) ioctl$SIOCGIFMTU(r11, 0x8921, &(0x7f0000000280)={'dvmrp0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x20}) 07:18:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "91c5f7", 0xb6}) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="fab2184ef35b84c595e44f57ba99dbfe358562b1b4e22fba1251e85c6980aa3005fb503c58519fb038a4e2a97c1f07f2fc396a4b7bbc1df57dbcc590ccee2e10dbadcb269756430a7b863307576184f03209cd68601f3ac7906e4f21f3f908751b782b32ec45ea12a1192b4e4ae3de1c0c595476adf0477622a801285f7b4d055c9c72f7e7b13dc2409f0c3a02e4bdc8eb5e0391ab9db4d3383c") r3 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001280)=ANY=[@ANYRES32=r4, @ANYBLOB="6c0f0000e316e65d76144ec1d20284f5ccbf4773dd4c57e123dec24a6f4cfd32e6f871b147ff3826907d5b6f725b60253b45a90bd15f53db01cc8f926c191624c1b104b3bea279f2a498ed65c584bd94881c93897d33645366d42cab083002f6cea0dddae406a59e53b0a98e991fcc29fa70ddeb2f90ce478fc68593c4dc94e35ff9d1a8aae202f5ed790c6cef504ab87b8779bf4b0f086ddc48633571e410832cac3908d661bb8265e6fe4feab190b4997802160aa7c049b69121181a560e8e5710aac1abfa43e918fad947a5694c429e376766b99367b50b270fc0e157bf5f612897af7f5cd04a635cddb19a386d3ae67d8669a651b61ef695c6a5e08b31b81961e4a96961f4de32c5ef7cd1620b2194b1f26cdbc4a1f5ffa95365a5e4aeb2573d2f65096ac320f6d4f0d904753c8d6eb8658b8a3ec090ec1e26edd3c2e60261dcadf018d435dfb68f06fabc21a25668eb5c12e23bcb88021b0b2be6ac1ea234d835efd9c041d2e38a1caa283306df4fd23cf7cd8b98332ea69a3a5c1b8f25c42e971fac28121745bd438b3145ee87050c8103947930e1ba0b7497c5095775e409456431e6f4f753a5de77bc8e7ec1f5d405fc5bcc50505368b91b4606a5546a5c3e55c693ce48a47d96f3fa9f06c4a466a6482345f396e7d583128baa22c23e2fd4eecc2f4482a3ae2085b7fb8aace75ee30690e911e19c22e98036c831120cf1913cf37920f0d6c45cccf5328da7fbc0786413722555729518390519504d2e987a0700648183bc40cc36f54a946ee1a367f74e10ea1b2ff378fbecd2b40f50206663d02e2436d38356263e08b7bf891c7aefa19d213057fc97520763e28e56082cc7c7c998419d50dcde2e6aa1ea617b4c133b30a265b1a6d58cf72565ecd8c08484f605b128b18a150d95bc41ca6b6e3a687e000314e4d450afa44869af3909c03fa60d6cd479a770391b829ee0917793c29796395bcc7f50e6a8bf844c61d2afea02016aa401fdf7533a122f9fc548476ee594da5e0f2a115ad08e8365be760f502a263ae10ff4427363d5639d4ab7ee20fed59c21cb06e3926ac87eb7582067b9684b6b77c89b72d432c67dcb8b0f089be4b4c3d681f7dc772204c1e4b7a582245f575b3e4f4cdcbea2525bee8595fe349b68198daacb00ad8db4a9f5967953e6541e5b4d770ca51234590c9a8cd68a0db5874d1acc9a2837b26fc0d1216dc5e351957c54f6477968b51385763f4974078b69bf98eaf0b681c2dd1df92791e1557dff50983aa27fda0133b2d4a43d4c0ec2b6969e47d777e9cf7bbfa2a6195e523cb4dfbaa3ebcf0dd1469fd19a951ca37a71966eef85d357e53a24d2b8c7676c83d9681ce5e92a7819ae9fd31f9eca7c759a35984a9c37536ec937f4ce5c67f497f8ab201c52b5429fbe1688723f79a3ca5a08f5ec838b087dbb4b47a78f1b2006f2cdf0c6a97ea020e989748b5e1dc285b99cbfdf81b6b9dad71be727ca64ce2eb2fc685418ead71629c8654b5deea66952ed4214d35e6869c415991d5a84cb64dfeabd3bcb51b8a8186191547a80e3d06500f870618ddbda666c198c1d137e86d57723df29661e693f16bc929ad1d85677eaefe90f807e810660b40fba50756c0dec7bd8b627abcb574bff9c8f892f66671a7f8bb29d6cacb54303f50ba11c3de7ed6a219dfeb5f1873b48be2008fff05ee537b73a3dd771b3d4f5dac75ce46c13b334bfcc6302c28724864d04dba39c253e1ac3bb75219e7f9b7794a322c08126c3e62360a9cc10af94a36209c5e6f49b0c8ff46c02598b096d4f92327f1fb0372f819d5dbda78a1b9bddbf3a52b2b6404d996f168f275fa536eb473a4920c4ef5d9ebcd7d5f0cb0a77e02f6f384a6309110c936573ba65998f87db5aae18cda434fc365747c23dcc625f510c7a82a00101b5c41f5dbc8027cfbab2bb33e82f3bdcc893e335bfa25731f72894b9f7324aacf91bbba089222b24ce6215be3130b2b53a3bc6cd23d0dcf5e5490defecdd869a9647d963b560754ce278ef75dd4dc2b5928c31c4d1c5b94fcfd9801856a48a01b9044ad5b125b2595cb684045a956cb2db7f30a2f3eaf62a143e4fcee84d2bab9d24754d26dfe0804c182e5a59a2edbe78bc4395765551543fb5e0b2e57718c50abe9a497948d0523bbcc15c029ad455af7ac379d3a02adb08e5aed5fa9147a61f0771b5a3e2afee54a527a6d68c1f5d33829a8fa9d6ff79568911b7bebaf988a73bf32a43ba03fe463d9664cf420f292d5f48a812787c2202c755fd7973d69a2180c25fc47d891409ef6c2c81746df1c75f43bf7da50a9b5b19cf7eb9a2ccfbbc4a4a9c1097be3e59c18c63e7aa2fb200110592b6b3eb906f2c50bc28841df5c90e9a2e37e8e676123fcdd953cbc844d66199910ccdc106a15df8d345434ebb25f4190c9f3832d2dbededfe9f2c1caee0e26b693ff13b6eecf7885c5bd1805b9bea00af23f94aaa39cf8fc43bf63aa784544c20197d2bdf1ddba15dc1c1bc6d4a2b59af422b9954494b56fdefcc6482e6a8bd4f3a018319115cc5c04c607f0c0deab89bea877420b5cf426e9eac8ae5a868a193410d447b65eb6b73772a07363c5980ca43fbca3920eef8bb2e2971760df9acd139e57ee0ab08e4c03bf34fa76150027c596a4f9f1d9961a2331ce6ccb4344674aeb1a258377e3e6ae9df1967d443411fe2c1c20761deee6a1f23dcf6e29662ef42a9ff6ab7931f3b681b0f9f6ec9fad6c7f0bc3b456684c0f85043736ccadb6989ccb8192c20555c6c034a45c71fb9507954cc7d08f5bf5512339d7bb85c90e1028120174f0829d9aff66a29fb70a6e531e9d915c99c82f58b6a150ad001b5b98d0e87bb9661b8238000ee30f447be7ba1c291d0ee5db801808eca0e570c517fab84764ff97bef2b74fb7b682eca63ada27ace1d87317d6e74ec5ae0cf95611f56b9135b8b3e8cac85e1b1895e049e2be06db9e2a0db39915357ab534f6ab4da6c31b943f563846e11807db12ceeac914951aa889f46515e080b458a6322ac05162dc0ff19e11335425ef7eeb1620a4006f657c15fa834e14c99cd6d0cfbea18ab021ff68afb6e98411e9c327ff44e20aa3c31a7a5abbe63f66c1956dc042ec919d619e99a8e0f97397572453ac1c855dc6067d99aef7f19d9f5175334344b3bc5e74694dd4bb53dfb1dcff99487da4a83cf7cdc6199a43a706e35c3eb87d48e8f609cd927cf2f39a876fa853621bede3daa0350c9308fef0b66770170c22012476906673288eec5ce42946b6b50e097c2fa3f9b4312888f63a6ce57551cc902dabe28af00f29abc5fb05b47d858f2bcf1d714ae458bedb0a6d08bea58eec9da211b143d37ecfc520f7e37c82ff0c8759b289e046e4f12c69aaad4c7fc83ec9b5dadd491315c958c608c2457e728e2f965963acde9d27cfebcb77fadbef3f54b4e4a71bdadca1cac0c54d009c78dc52e13763b3fe582b79cc1b295aa2c2bc58706281dddaf8a6cf95745137aa6df81873469753783fc3043b31f41267a813677067eb89e58d85969f9f25ceb9776542efc87efa772cbb6d560d713b290f7771df38339347081d40d55800da38de55e9b7f4c9ce140ac8f2789ecea674f128a48abf5c42f711e8dfbf255ac3f202a12996614e70f5df1dd01f86cbd4dc7fc32e318e2118ea46dec3785cdd0c9c7fc01faecb3d4f14b82e7252675ba2c488d117fca7892ab10fdae6eb19400803116696a9cb2ec029aefed7de0d98d8fd5816f74f91178987f5e7b87c21513039160318e152bcb5bc3aecb0a79ba6df4ec484839b278f1c50b767e02df6e40deb25c1ed6b9072c1298e65c6f04b8a71f747b67315fcdb931a369f1c81c3e63c299d8bd0fd9b1b1bc2301e975049dd0769c53e498b5f5688f19963273a1ab0ef38984c23c6d5d4017478cb9a603c76069e7818eff301b7d79a2e064f7f4fc0a92a6de17215a242bdfe02ee5cb796fd6e9a8bbaf7871993537704f44c89dfc312429186766a812cf5e1ef13766f10aa9e0736c65d781aca8c45b132ed91ec86552d4a246b6b295bf732849a75ca5bb91bc519b8a915b888dfcc07bbc8f9c21faf14d076b4f29cec95bdca0edbad5299670425228b1d4a31a1e8a89b5bcbf7544f8dfb618326e39adbbab07edde2e916c691f5b630b4d3edacb4d5d6b2bbbd402454cde053a10c7273750f92625d26b5998cc7b3740f1cd4464fe95386bed3b80d7103df0025afed22880b6308b73f106604585731bbcad42e218b98d490128f4b79f7f4d4a2eefc251629694ef2a2059cce67fd01087df1bede26338c6fad3d127f7acb0a2766c5b63fc597d25aa8aa736be6c651e4a7702da6a4c273c108cea7dc92942e4e1e7d1b834a192f8e7de22aca55f8f6de560b02836785a30594ef64056c79a615f71541b9012e98fb0317af5494bc03939ecca2ff5fd56fdddb35e1fa1b0370addf86acda950a2457c86894a04d84f1745eefd3a79699ce00f8168b79a54eb8fc5bcb27810688aad287dc20cf4129931157fc85128973f73acff5b346621564fbe2230264e348392a076014bd35e5dd0b3a2723834ff68d8bad3eb8baf36e6d3f3ddd0df53ec1219457bca565880b2ea14d2975187fb3df3a187f498c07714894688090591e4c406046f1ce000e7b9ffc320b4cec7e198745d6bff0c2905558918b4f1b4d43ed23d7ea2f346a25fdd1070309dfeccee2299640e4c400e7c7b3ecffb3326db53c12cdae10387d1aec1f8d94a76ea4f661434a3f6d1ac30689cfdcb2677f8b4f01f5ef8b9b8ddc2e5c7cb7dddeaf6fcf409dd8cbbc420d3616d1b5e65cbaa5edac8d06cb49c06da5129a8a31230da1ded184042aeabb2626b3ff729144c1c2bb1cf8deab961db23ff2c6d3c6e810e8c3f41a8768ed097af3ac84bc6d4f3f09bd0f4e52e3ebbadcff1b2b2d74c1ef1a10ac420b39b684f523fad879e7cfd4ed822b93d0150432eddd7e7bb770efc5b6809a9d28f8973aa0c71b22123c18d425975da6c840df114f3238261c721535663fc0f7fdb06b469bf0522cac7eb5705c8ee066bdfb703cb88604547575d18f0490da9c078ff7a03839362380e42581db4fd79968b6a6e92c5829737ec12de4cdf699cc355ce98a2071ef8f0e79c9bd980e3563f55fdc2b82b017924dce6145a5bedb71a32c9e1af8a73873d37d840e74f791ab46833f1838c3980b792603f35f78617d95c573266301d360b9074cb647bafe5001e655a5112f2d92557da3c839586e129dce1fab8a3be618bde908a122075cef2d9f0831ae3707402379004e8edf2cdd1988d5d5c5e06fb8faa4219c741445041a73de56c27a156f3759cb777b77402c9be6908de83c966ad7829860dc3fcb6d14f519668bca6a2c7a0eb13b6d999e8866bdf41573549734184f848a28be78eaff5dc5187c71dd5d56c39238c0430c7c03ecb42b2016e343825273c6cdd5b27ee3b4256d383367e760aa694e019f2f01a1d80022f0ad90bdebff5186f30a46fa03271af998ac01ebc109c6b63ba1957b4ab5409ecbd808b91d8ce9ae8982e2a36bd250f830f6783f86dd4d70dd572137ec2b57300ff07774fb2c6861b89b8b2f1ba5fde0314f1150f55075f1acb90e389f6f0118bb9afefa44bcfd2f174b4e4d9e294bfbc9d6b89de68c98686072a535bad9e10577c508bd267033b63c2b6c23a85359437ae87af9fa2db1d37b45a8492ef52ef48d867997f07c2b8e3288702ed8220452bdeaf36a31cfa38134c059b2c5f20e946a385f1699c94dcaf86ce7e17c4268d1148e8fc4b8da2e93898e8ed55f35e74280e94f5528c3bd300134b7c6b3f23"]) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) nanosleep(&(0x7f0000000180), &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x736f45748595091f, 0x4010, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000100)) 07:18:25 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x8000000000000000, 0x4200) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000000c0)={0x2}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:25 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x6, 0x800) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x83000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/79, 0x4f, 0x0, &(0x7f0000000100)}}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20}) 07:18:25 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x52000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x24800, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x6}, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffff8, 0x521900) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, 0x0) 07:18:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001240)={&(0x7f0000000040)="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", &(0x7f0000000140)=""/4096, &(0x7f0000001140)="36f921689391a97026b21517305f3c6ec12bd02b36bdaa4cdc49ea7805edc0df41c310bab1ab1f5f0dcfb2b23e08", &(0x7f0000001180)="23a69186d74430957d1e3d50f7a2ffcd046b576713b2adc82374fc3238a7b64fda57536802a6d953785e9c412a73c907733a31f642eb3fb3cf0b58eb3638e020131e75d71d0ad8cfd6e68a21e9cac29cc2d476e00dafc2b15c58be420ca5d12f236bae88f99856f7b09954a73d14730e93b2e70893fd2ad38e8b7493bb98761ef8ccec73a37ecfae5f192865ffcc81910d0c53", 0x3, 0x1, 0x4}, 0x38) 07:18:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000240)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x2000) (rerun: 64) read$usbfs(r8, &(0x7f00000000c0)=""/114, 0x72) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x0, 0x4) ioctl$SIOCGIFMTU(r11, 0x8921, &(0x7f0000000280)={'dvmrp0\x00'}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (rerun: 32) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20}) 07:18:25 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x2}) 07:18:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xcf0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r3, 0x4) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20}) 07:18:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 07:18:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="3e660ffd0a0f005e00f20f2de23e0f09640f22df0f07b97b0900000f32660f3881710cb9cc090000b800200000ba000000000f3066b82a008ed8", 0x3a}], 0x1, 0x6, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 07:18:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x2000) read$usbfs(r8, &(0x7f00000000c0)=""/114, 0x72) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x0, 0x4) ioctl$SIOCGIFMTU(r11, 0x8921, &(0x7f0000000280)={'dvmrp0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f00000001c0)) (async) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000240)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x2000) (async) read$usbfs(r8, &(0x7f00000000c0)=""/114, 0x72) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r11, 0x111, 0x5, 0x0, 0x4) (async) ioctl$SIOCGIFMTU(r11, 0x8921, &(0x7f0000000280)={'dvmrp0\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) 07:18:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x21e000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="670f60dbbaa00066ed660f38f624f30f09ba4000ed66b8000000000f23c80f21f866350400f0000f23f87e23440f20c066350c000000440f22c0ba2100ecc1ad490000", 0x43}], 0x1, 0x20, &(0x7f0000000140)=[@cstype0={0x4, 0x7}], 0x1) 07:18:25 executing program 3: mq_open(&(0x7f0000000040)=']]\x00', 0x40, 0x0, &(0x7f00000001c0)={0x0, 0x2}) 07:18:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 07:18:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x10200, 0x0, 0x11000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)=0x1) 07:18:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000006c0)={{&(0x7f0000000640)={'Accelerator\x00', {&(0x7f0000000380)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {0x3f}, {&(0x7f00000002c0)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x7}}}}}, {&(0x7f00000005c0)={'Accelerator0\x00', {&(0x7f0000000500)=@adf_dec={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x7bb8}, {&(0x7f0000000440)=@adf_dec={@format={'Dc', '4', 'RingSymRx\x00'}, {0x8}}}}}}}}}, 0x7f}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x20044001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="26660f38811dbad00466edea070014010f35ff87f587b86c008ee00fc7680065c1d871ba430066ed0fe820", 0x2b}], 0x1, 0x8, &(0x7f0000000140), 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f0000000700)="660f3881be27dd650f01cfd9e10ff67993650ffd4300baf80c66b89cb8dc8366efbafc0c66b8feffff7f66efba210066ed660f38107218baf80c66b8d35a318966efbafc0cb000ee6e", 0x49}], 0x1, 0x10, &(0x7f00000007c0), 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:25 executing program 2: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffc, 0x1000, 0x5, @buffer={0x0, 0x12, &(0x7f0000000200)=""/18}, &(0x7f0000000f00)="0be933ffdee87e86ee7b1b5d4987885da33b778a6023823ee1782dc82393e8ecf79a540f2614c7e9646ca73ce521a0cec3372f47659844be8143f2c88d9443a24c358176a7cb174f52dd63790d26c5c6664f2c048b47efc34d32bf4e01e0727b101a09008019c353ff7679976916e01743b99ac6fb6d74b0b4d43106d9dadfc7dec51fbfaa30e49e73d927f7e938a89915b45acc8dd3741c970109f7d0854b06bfdffdd2a53c1aa690469d016f48466b10b46bda095fff331aa4dcc2e303ba0b9c52b10a7a3dde485bd00c1f765df2b6379261236bba391499cfe298e54df5d8c48d5478aec84d35996828d5c7521079feaae39c35a1134cca2f759c57e2b720e62a57400bd3d31d22aa95b0239d628f7b207f0407025e76940199429b0c86f3fe6fdd418fb0abef55aacf3513ce598f8ee9335daa5b225a7fea1ac3f0403439bbf7dbb351300f8c5d284c144cdb123a164de2493f09eca697afbaef0e57829a060a0a2a5babd526ec586e8034d9950934851e2d66b1f5b33bf34fb4a3f7c872b17d1422eb77129d2823b578411523353ea9d42e1d8b28c94a7541d21ed6662a56bb518a2856d2ef46d3f9cc995a8e720412950f5afbccd8a1f037d738c5a7190b50c2ec27dee73afb4ca0d03071dc764da9d02743f82c41024ad76474f4df54b96c10341e957ea93ae822767999f6dd2cdb504249a4a21ddc526b23a196c23c93a78e7fcbe282eb536d8f209b18f2837df88cc27003379eb6487e347a4bd58be40eb141e694a51509b0525ae63c1e167a3bd8d7e57115fd4989a5cef938c6ade660b9607c398299cd5414b6fa119d1af0864d2adf5e85ba7b83205ef0b1731e23494dc031bd8fdb22b30c047696b526d57d956b4ddeeab69e192091141cc68ca4899545422d9b591fe33034d643c58baae0c47abb2f3594e01aeb420c85b7706bbf207bfa34da7aa7aeee4ff9e39dcc7a82bfddd118191f210622faac0bd59e8c0e1315281d4ecb4f1a88a1ed18dcead3a517bd5a9c8f9c0f2c5379ab0f38bb3b6d687a5727969f1b2941c19d1c8ef50814399d0792b116aa44e0f2fcc59fb6bd2aaef67e634a33637953da6ce802d2f0fe8297decb159d902f2f722356248ed62e0206ff4f4b936ec267f5926d010d1e46321dfc1fa93ee5ec4837a7db14e3a4cfb486a033a7ae65725e6c2009b1c457c9fcef0190864cc842f16c98b232844548c758feb37ba764103343fc5241ee3ea34e54c38f3423dcbcf6a810fc8ab396b3bf241bf9ce3f616e4e33606dac5476d7e73fa164881a443aa621750a7d8183859416aacabc93bd2d2e381e1fbfcdbd4d085f85e6db722a629efca77b7da3d785ac1b89a63e0678908656d442150a23ab3c7ac71dd08abf9ecf2b98b58b8d67e7c802356c39b7bfc5a4958fcf457765109b850580f1e1145dfc60980347e4b05a9e61f3da81f8e9a4107a4d8a38a4c9523908f14b3beb239b508b9f13020d23b3ebaa76c60611ea300060e400cd7237a65546ff2b904edd4627dbea72c2ba792e7a50b27bc9e3260762c2d09db941bff411fd2b43508300d0960003e246456ce648c8d1847cd9ba58638d858a36af7dd20a375b355132efe344ae8fd1dd25fcf0e534e868a53dd42e16dce42f1305ef6e8ba49630f617c9063c486c261a92b42f37637823fd566f59f0a13213246e07d0b0747430853717dd8b1fe9913de3170a0e3a1c15c2fd25376614935ca153216cf0faf9745ddc1f98219b739acfb993b8f07ea76277f06df0d3a56f5e40356e2c6184326a011ad1ab08b01a473fb136858b95bae0fb999003acf54335cfc16770376f790dfaa3fe0b9ebd852229c5b2dc68622540178b06ab3c3ea47bfed5b33b7045470563153d3daaab701dbb09df9f20ad6d96cbac771f08c4f87867caceb3cb82e26491742707fa5f887054766b6eea90617676b4fc54aa02e905b53744ef7e2793e7220c09e9cb86e4a9190cdd80d90a86a7c9c0f556d9d71c90dffb6c2e0ee15492a68a291c66bdb8f813b7d4a4f52bd73ddf5b8a28735d521eeb725cb11f39f4fe70c69861c6895464986ab7ce29ae27f0d7e9484a2188722b7f7c87665fd1ca50389fb91cdf77111e0f3806e0910cf3c8b4be4b6ecc81081fef45907af892e2307dbb2a141148afeddfc3bb02420c4eeffdbe4700e326cfd915fcfe3fe4117c955325fb2e005371c1d9a647148bc016b8137233856272009b2c4d70ef56307ff6cad729d6d7d5f32f0966bc7b3da5b280bd23dae1d23a7ab69420197b25262e5f77e00a737fa0c73f5d17246d14bf5d645c7a18388147e9c0141dc9a576dbdc9d629a4f4ddf4a16eb13d9ea2f99f4ee99f80c3c094aaf86b11c50b333c6d83517f5a6071c32c349de4b582ae67ec05d1d75cd928cdf375b713ad2abe6a2206f28c0df2c2128763f98635859a57af0bd70d72a1efbee4b148a13153cc10685e47923c7cd8df9b0594f517c6c6c9b48396f8e0dcecff8c4a72423ffa69285273ce9e07dc587b638a723b2a375c8de70b6e086ed151bb6445bd45ce7946c77b73cd326149bd31fcdb70dbd2d070c7a01263f92795c614294af1214fa13370e85357495330b5520d50ccf54c005616dfe93f7e738c8fd7b4734346577921eff7010b39b8fcee392ec81b967cba6a510e0072af807e4b769c3d69701c4875cdd8ecc57085b86b6f607691385c7fa32079c1cf42868468c8b84c614c0c6145b75e1fa51af3649e7b5bbcc42bafbf0d3e1346e01c36dc610e02a3cb0a91a0bf5696125ee919dd48ceb67a7afe8a54095770396e6dcbd33d624127cf5d0a747d7cd0dd8df7de114e982d2f52d97f19515cb8c2dae3a181ea6641640394bbdab7a4eefdadffab82a348db0bdbadcf8a49bbe5c651c456aa538e5085793960f559401d36e26a61f4edba40aa8f33f13b6be1b9fa814bd6e5fbc5b91f83789449366dd44525fde4c953cd854b2bf4b1bdba444024de933e0a1d7d629f4fb14e53bfdf3502f10b3114dda452b3513f8217ad52a4e5f0e71e28fb20962c697b6650b8ab68d755a4ff435e40ada84af3e48d8131df347e0ca3ce0e829f6a29660f6b651638793e6cc523f1e617fb3cf7a7d4151012761b8748a171b2130716163d37616fa1093e6e2cee145b1a86a99c8ce8720b4c6c68269aad556d3d528bccdb24bb77154a0f8812c0b13203afd8fcebbd7e1ccbba7d1ecbaeb5e980984117d4a255bed01a423544234516aadf58c9176a42a3bab0d4fac8c44096be822f78d87df46bc2d8426fb718bceaf25a1baebefb4cf85bf434650c51a3c26b894bc087bd5bc440018cbdc8afb596cb5e149b4f5b12eae17b4e06cac1c8d008079d6bff1ad60cc80ec2d66f86758107e4da79f8aad196eaa30b5fec82d031ea10091fa8d8df28d662285230cb6af80c16f83c4be72858bdccc08d3ac557879baed98a95180e7985268dc14d59100bd36c5f7576657234ff67f7a1f944fba6696b319470c9b41c212dbfd47436daa07a3ead82c097987f6013a8ceec6854a08873f6b5e4f2b64af811dcfddef60cb5d3de8ae83c7e553548d48c861c8b89698e64ebd55e3164cc2c60c560735a1a019654b3e0d6e1e068f5c0368901b52157ca65e9ea69d6b0d8c619a9fed8118307113980b9dcd1d5749521361e32f48afe02b1a716233c781dd5d9fc12865ae9c0f1be62cad9d91a14971ae52e3fa30606fadee2d075f70ff1e89f6ae9996e1a93ebd3a55ce638d6bbd319d31980c314d606711e3b6f51fafecddd0d7d44ca3d10dc79440a5b04ba991357be0f483c9114179f9f8c8572550cadd3cab5468e92ecd2b7a38b485f6c4e9e63b9bbcb5ad672ab232dadd92644b747f07328c6c6e94e69ba9ab3ac2e2c59021204ce0d7f5760ccd3aa03e37942f156b5c8a8024ab90248d367db436624858f662e70bbdd88ac200d349a43a1848dbe774141aa0e61a154bb6c83a97351874247e81e11f51c3d08bc6af12838419162343e536726003bde640266d2ebe20d452e30349c3d7eb0599cf65bee8858fabe94b948def4368eaddbbe92c3915933d852e8b7b13c347a6932c6376d2f97fa2ed940395184c9a0e643a80a3ab89acab2bd9a23bdda04d9160b5c7dcaeaa4998425798a324dae1720222fdd36ac5a46e3023219cef89ca8aa2839dbb7a6d8fa9a900576af0dc36c723c3adee7986d3677ebea85871f6eaae46013a2962e5c345d514a294240ebde67759d2648babd2f5a43405fab96f8d35e72ca438c8b46f2cb2a74459968676387c51ff5fb0bd200ce2742f37d69d244b1126e0cf341dfb9bc1d376bd9cbe95c087f72aaffb5e683f5a6294a8695b4cb0c965fdd5d6d9f72a5021c6c44ec95866ba63f2b98b0b7a1a51af31abbbbc698afc529e7698936ea2f221c0f2aa8f3428ee48532ca33bd91df3b1ac5c4586db4f389b10cc4386d85a4adb36c11db3ddacf1d139d194d988dba655251ee72dc8416c03e11e0fb9150d45cac624530d11602a6c5295fa05f39baca33bc8ebd4ba0c8c7484319beca2020ef14c864a8c99e570cf313b4d1bb60157fce3529b514be4b650ca0c5f79a45d5e2d573f391a34a8e99cd09eb6cda2f4e207acaec5716f25f85b0fc7833a98afc57c09529e8a7d54ca27d255847145a4a7929cc723a8c8ef31741957840187fe488dc99820046a4fc54ada65c5f807e2d75c8f2c6a04e848f361d4bc1346d2e7468cee0017fe42e85a749fbfb89b69184b9c029dbac5d626a15ba12a4dba20e677db2f56564ce1f6c17a06d5d9e1ec6504da2d7dca345135fc37ec8e44ec16c19108cc4d43609c270601d6a8015cfbfcd9cbbd5512e1836972a1e3bd55adf0ac1f8b8b977febeaae8293700fdd2f8d68f0481389fb3f13ab308f2a3b1b89b0dce740302b0c54be98c875a1be462e292731996d5f4a92322c12d4450334ccbea3955a91fc9e365fb01e36f475960b24d036006835e086ac955db1797e480066e44c7babd088a7e37148f62f7a8d28a9c8d3e719f9dc681520d768e34cc2131aefa5fffd8ca3596febb2de6292dd576806bdf1e53a8e0ab3b151ff743c4a893eddf679f1b33a28ea60a1c5c55f68e63c771c4c87a770a4342a15fead677427c81cc08ff6982431fd5278a0ba52e76dc6035aa71205f37a97f31ca1493af3d57dad387b97c93c60f5d82c27e6e7ecac2c712326b135a99010658c03d7ac81f8874b1e9f900b1e6b483ecc655a6ec9d0c8415b51364754e975e700200909a34cd27f8ab03bbd19306801f383bcce76f4a6a48e949d76b1e8a4f733d842e4451e887303675a8b12283e24fe4ca6daddbda865f9bb7979296678cbb3ff55042fac196a9afc25bb43f1e6d601b04673833b9b1388884497a543b370e5cd27ca662f2ab7ba1f6d6486754e86ef08a33068781472ec885299ddef3d253c7debc20c82b4c63314301f54c3b39c4d219e2b0aed7e20e5a227b724a94ee3bbb18d499a009501f4269e2531eef9ff51e75331d8b9cc6faf5c561a40ec202ec791f73e536f6c0f91243f320a5eca5c3df7060f33fab7540ac7a701cd25a8e83a01e4fa2ebf9372fd1126c834ec786ada2cc38f48eb11d2e8203c4bd0f592e9996d8fa729e9b6401c8aa78d9336df376107f6e2eb8fb1d759b72e06f26a656439e01101bb8db638ac5ae1e0d74d0faaf80a814341401b613fc0bc6d6c9691b0c5e209fc88cd6ac7f08453f8641415fa5e240f3234bc1409b2ae8620fb569d17662beb61fc34178254b9b350ec63db7ce6868c6df8", &(0x7f0000000240)=""/92, 0x2000000, 0x18, 0x2, &(0x7f00000002c0)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/103, 0x67, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000005c0)=0x40) syz_open_dev$media(&(0x7f0000000040), 0x8000000000000000, 0x2080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000007c0)={0x10002, 0x0, &(0x7f0000ffb000/0x3000)=nil}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000440)={0x0, 0x9, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000100), 0x3, 0x0, &(0x7f00000006c0)=[{}, {}, {}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 07:18:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20300, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) 07:18:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, 0x0) 07:18:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r5, 0x8) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x9, 0x1}}, 0x71, 0x9, &(0x7f0000000040)="d00472070905088a33b51b298509fce289cbf9375e63cf670df5cdf56a6e5490247958b426975d35342a85acfaf9d4312fd090c13b532a74d47405b1773e29bb6e3b4622bd6139adb8dcf7f43ec26c3c29e3e64b29de43fe38d89435435aa3c2890bbb3a10bc9d3177e932b6c35c0ca16e"}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x2}) 07:18:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x73f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c53c0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000000c0)=0x8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 07:18:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x73f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c53c0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000000c0)=0x8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 07:18:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil}) 07:18:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r5, 0x8) (async) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x9, 0x1}}, 0x71, 0x9, &(0x7f0000000040)="d00472070905088a33b51b298509fce289cbf9375e63cf670df5cdf56a6e5490247958b426975d35342a85acfaf9d4312fd090c13b532a74d47405b1773e29bb6e3b4622bd6139adb8dcf7f43ec26c3c29e3e64b29de43fe38d89435435aa3c2890bbb3a10bc9d3177e932b6c35c0ca16e"}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r5, 0x8) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x9, 0x1}}, 0x71, 0x9, &(0x7f0000000040)="d00472070905088a33b51b298509fce289cbf9375e63cf670df5cdf56a6e5490247958b426975d35342a85acfaf9d4312fd090c13b532a74d47405b1773e29bb6e3b4622bd6139adb8dcf7f43ec26c3c29e3e64b29de43fe38d89435435aa3c2890bbb3a10bc9d3177e932b6c35c0ca16e"}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000140)=0x5) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x4, 0x9d, [0x40, 0x6f186c6d, 0x9, 0x101, 0x200, 0x2], 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/157}, &(0x7f0000000800)=0x78) 07:18:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r5, 0x8) (async) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f00000000c0)={{{0x9, 0x1}}, 0x71, 0x9, &(0x7f0000000040)="d00472070905088a33b51b298509fce289cbf9375e63cf670df5cdf56a6e5490247958b426975d35342a85acfaf9d4312fd090c13b532a74d47405b1773e29bb6e3b4622bd6139adb8dcf7f43ec26c3c29e3e64b29de43fe38d89435435aa3c2890bbb3a10bc9d3177e932b6c35c0ca16e"}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:26 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000015c0)={0x0, 0xfffffffffffffffb, 0x1000, 0x2, @scatter={0x6, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/229, 0xe5}]}, &(0x7f0000000480)="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", &(0x7f0000001480)=""/242, 0x8, 0x4, 0x2, &(0x7f0000001580)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000140)=0x5) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x4, 0x9d, [0x40, 0x6f186c6d, 0x9, 0x101, 0x200, 0x2], 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/157}, &(0x7f0000000800)=0x78) 07:18:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000100)={0x100, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x4, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 07:18:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0xc69227d0badc6591, &(0x7f00000001c0)=""/199, 0xc7}, &(0x7f0000000100)=0x40) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000100)={0x100, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x4, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 07:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000140)=0x5) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x4, 0x9d, [0x40, 0x6f186c6d, 0x9, 0x101, 0x200, 0x2], 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/157}, &(0x7f0000000800)=0x78) 07:18:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x28, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x8, 0x6041) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000001c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) 07:18:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0xc69227d0badc6591, &(0x7f00000001c0)=""/199, 0xc7}, &(0x7f0000000100)=0x40) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0xc69227d0badc6591, &(0x7f00000001c0)=""/199, 0xc7}, &(0x7f0000000100)=0x40) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000140)=0x5) 07:18:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0xc69227d0badc6591, &(0x7f00000001c0)=""/199, 0xc7}, &(0x7f0000000100)=0x40) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0xc69227d0badc6591, &(0x7f00000001c0)=""/199, 0xc7}, &(0x7f0000000100)=0x40) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 07:18:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000880)=0xfd29) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) 07:18:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x8}, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 07:18:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @multicast2}, &(0x7f00000000c0)=0xc) 07:18:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="66b8bf000f00d80f07640f01c9c4c2fd20876b4c0000c7442400fbf75b77c74424020b000000c7442406000000000f01142466ba2000b000ee9a000000804a00c4c201938c110b000000670f01dfc4c3210fa316e20000c6", 0x58}], 0x1, 0x40, &(0x7f0000000100)=[@cstype0={0x4, 0xd}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="66b8bf000f00d80f07640f01c9c4c2fd20876b4c0000c7442400fbf75b77c74424020b000000c7442406000000000f01142466ba2000b000ee9a000000804a00c4c201938c110b000000670f01dfc4c3210fa316e20000c6", 0x58}], 0x1, 0x40, &(0x7f0000000100)=[@cstype0={0x4, 0xd}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) [ 2093.725812] misc userio: The device must be registered before sending interrupts [ 2093.765467] misc userio: The device must be registered before sending interrupts 07:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 07:18:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10001, 0x0, &(0x7f0000fe6000/0x3000)=nil}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa10066ed66b9a701000066b8a199000066ba000000000f300f79f5f4bad00466b89c81df0f66ef360f014c0066b830b600000f23d00f21f866350000000a0f23f8baf80c66b8dc5e688966efbafc0ced66b9800000c00f326635000400000f30660f09", 0x64}], 0x1, 0x1, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 07:18:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) 07:18:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffff9, 0x69c802) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0xf}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x8, 0x9, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x9cbf, 0x6, 0x0, 0x8, 0x4, 'batadv_slave_0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x1f, {0x2}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) 07:18:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635008000000f300f00053ef30fc775003e0f300f787f80ba4200b89ea3ef0f0172880f01c266f36da90090", 0x34}], 0x1, 0x59, &(0x7f00000000c0)=[@flags={0x3, 0x208200}], 0x1) 07:18:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x100000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 07:18:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:27 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 2: syz_open_dev$sndpcmp(0x0, 0x0, 0x125500) 07:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) r3 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000001480)) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x8000) 07:18:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:27 executing program 2: syz_open_dev$sndpcmp(0x0, 0x0, 0x125500) 07:18:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 2: syz_open_dev$sndpcmp(0x0, 0x0, 0x125500) 07:18:27 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) [ 2094.674119] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) r3 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000001480)) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x8000) 07:18:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:27 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) 07:18:28 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x125500) 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) r3 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000001480)) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x8000) [ 2094.779808] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:28 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) 07:18:28 executing program 5: syz_open_dev$sndpcmp(0x0, 0x0, 0x125500) 07:18:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2094.880157] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:28 executing program 5: syz_open_dev$sndpcmp(0x0, 0x0, 0x125500) 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) r3 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x8000) 07:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) 07:18:28 executing program 5: syz_open_dev$sndpcmp(0x0, 0x0, 0x125500) 07:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) 07:18:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 2095.061632] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x8000) 07:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) [ 2095.185082] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:28 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x8000) 07:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x10201, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x8000) [ 2095.369147] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) [ 2095.423327] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x8000) 07:18:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x10201, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x10201, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) socket$inet(0x2, 0x3, 0x6) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r2, 0x8000) 07:18:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r2, 0x8000) 07:18:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x10201, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 07:18:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r2, 0x8000) 07:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x10201, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 07:18:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r1, 0x8000) 07:18:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0xaa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x5, 0xc, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9253, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x100, 0xe3, 0x400, 0x8, 0x800, 0x7fff, 0x4, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:29 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000) 07:18:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6b8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0x1d, @private=0x2, 0x4e20, 0x4, 'lblc\x00', 0x4, 0x7f, 0x5e}, 0x2c) r3 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x8000) 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000) 07:18:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0xaa) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x5, 0xc, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9253, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x100, 0xe3, 0x400, 0x8, 0x800, 0x7fff, 0x4, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) [ 2096.145637] IPVS: set_ctl: invalid protocol: 29 0.0.0.2:20000 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000) 07:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0xaa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x5, 0xc, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9253, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x100, 0xe3, 0x400, 0x8, 0x800, 0x7fff, 0x4, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000) 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000) 07:18:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0xaa) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x5, 0xc, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9253, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x100, 0xe3, 0x400, 0x8, 0x800, 0x7fff, 0x4, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000) 07:18:29 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000) 07:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 0: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000) 07:18:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) 07:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 0: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x8000) 07:18:30 executing program 0: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 3: syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x8000) 07:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:30 executing program 3: syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x8000) 07:18:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async) 07:18:30 executing program 2: syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x8000) 07:18:30 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 3: syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x8000) 07:18:30 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) 07:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 07:18:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) 07:18:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0xaa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb7, 0x5, 0xc, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9253, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x100, 0xe3, 0x400, 0x8, 0x800, 0x7fff, 0x4, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 07:18:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x313847, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x206000, 0x0) 07:18:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000001440), 0xffffffff, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000001480)) r6 = syz_open_dev$usbmon(&(0x7f0000001440), 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000001480)) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x6}) 07:18:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:30 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 07:18:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 5: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/44, 0x2c, 0x0, &(0x7f0000000080)=""/111, 0x6f}, &(0x7f0000000140)=0x40) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000001, 0x810, 0xffffffffffffffff, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000700)={0x0, 0x5, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x80000000}, {}, {}], 0x6, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000840)={0x80000000, &(0x7f0000000780), &(0x7f00000007c0)=[{}, {{0x80000000, 0x0}}]}) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000000)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000880)={{r4, r5, 0x5, [0x7, 0x20200000]}, {r7, 0x0, 0x1, [0x6]}, 0x10000003, [0xfff, 0x2]}) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:31 executing program 5: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/44, 0x2c, 0x0, &(0x7f0000000080)=""/111, 0x6f}, &(0x7f0000000140)=0x40) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000001, 0x810, 0xffffffffffffffff, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000700)={0x0, 0x5, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x80000000}, {}, {}], 0x6, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000840)={0x80000000, &(0x7f0000000780), &(0x7f00000007c0)=[{}, {{0x80000000, 0x0}}]}) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000000)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000880)={{r4, r5, 0x5, [0x7, 0x20200000]}, {r7, 0x0, 0x1, [0x6]}, 0x10000003, [0xfff, 0x2]}) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/44, 0x2c, 0x0, &(0x7f0000000080)=""/111, 0x6f}, &(0x7f0000000140)=0x40) (async) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000001, 0x810, 0xffffffffffffffff, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000700)={0x0, 0x5, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x80000000}, {}, {}], 0x6, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000840)={0x80000000, &(0x7f0000000780), &(0x7f00000007c0)=[{}, {{0x80000000, 0x0}}]}) (async) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000000)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000880)={{r4, r5, 0x5, [0x7, 0x20200000]}, {r7, 0x0, 0x1, [0x6]}, 0x10000003, [0xfff, 0x2]}) (async) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:31 executing program 5: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 07:18:31 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:31 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:31 executing program 3: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/44, 0x2c, 0x0, &(0x7f0000000080)=""/111, 0x6f}, &(0x7f0000000140)=0x40) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000001, 0x810, 0xffffffffffffffff, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000700)={0x0, 0x5, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x80000000}, {}, {}], 0x6, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000840)={0x80000000, &(0x7f0000000780), &(0x7f00000007c0)=[{}, {{0x80000000, 0x0}}]}) (async) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000000)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000240)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000880)={{r4, r5, 0x5, [0x7, 0x20200000]}, {r7, 0x0, 0x1, [0x6]}, 0x10000003, [0xfff, 0x2]}) (async) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:31 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:31 executing program 3: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 07:18:31 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:31 executing program 3: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:31 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 07:18:31 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x400000000) 07:18:31 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x40280) 07:18:32 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:32 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 07:18:32 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:32 executing program 2: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:32 executing program 2: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:32 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x400000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x400000000) (async) 07:18:32 executing program 2: syz_open_dev$sndpcmp(0x0, 0x1, 0x40280) 07:18:32 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 07:18:32 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x80801) 07:18:32 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x80801) 07:18:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x400000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x400000000) (async) 07:18:32 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:32 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) 07:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x80801) 07:18:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x48000) read$usbmon(r5, &(0x7f00000001c0)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0x482) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 07:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x48000) read$usbmon(r5, &(0x7f00000001c0)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0x482) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x48000) (async) read$usbmon(r5, &(0x7f00000001c0)=""/4096, 0x1000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0x482) (async) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x48000) read$usbmon(r5, &(0x7f00000001c0)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0x482) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x1fe, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x48000) (async) read$usbmon(r5, &(0x7f00000001c0)=""/4096, 0x1000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0x482) (async) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x44800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x72341, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101802, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500c2, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x1f, 0x2000) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x7) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffff7fffd) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x44800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x72341, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101802, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500c2, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x1f, 0x2000) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffff7fffd) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x44800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x72341, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101802, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500c2, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x1f, 0x2000) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x7) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffff7fffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x44800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x72341, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101802, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500c2, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x1f, 0x2000) (async) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x7) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffff7fffd) (async) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x301180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x28, 0x6, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x10001, [0x7], 0xa7b}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd49c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x301180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x28, 0x6, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x10001, [0x7], 0xa7b}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd49c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x301180, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket(0x28, 0x6, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x10001, [0x7], 0xa7b}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd49c2, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x301180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket(0x28, 0x6, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x10001, [0x7], 0xa7b}, 0x10) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd49c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x78) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x1, 0x3, 0xff, 0x7, 0x2]}, &(0x7f0000000200)=0x78) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000140)={{}, 0x9}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f20c60f38c8f7ba2100b8f5ddef0f07ba4000ec66b99a0100000f3266b8008800000f23d80f21f86635400000100f23f8d96606362e660f38800264c4ba0000", 0x40}], 0x1, 0x6c, &(0x7f0000000100)=[@cr0={0x0, 0x40000029}], 0x1) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974790010000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000007e8c426800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028771ac8abab85aad6e30a8980b3807111792e297fb0b3b185d930b9d73d52720ef1b38ac5730aaa2fc41ff16943da21a54dcaf007d4f66cfd4e9f242eef104ed2acf0e0002d78f7ec4e84b433c0081e02267046c8ca602806a377a0bab1173db475ed5c4c9063b0b2f7ccec16789db100cb9696256ce0a67e0706a588b30216ff1352fd2b4ecb6323d1b597e2dd10e29bc44ddc0562fa6e8acf37"], 0x78) (async) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x1, 0x3, 0xff, 0x7, 0x2]}, &(0x7f0000000200)=0x78) (async) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000140)={{}, 0x9}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f20c60f38c8f7ba2100b8f5ddef0f07ba4000ec66b99a0100000f3266b8008800000f23d80f21f86635400000100f23f8d96606362e660f38800264c4ba0000", 0x40}], 0x1, 0x6c, &(0x7f0000000100)=[@cr0={0x0, 0x40000029}], 0x1) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (rerun: 64) 07:18:34 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x3, 0x6) (rerun: 32) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x78) (async) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x1, 0x3, 0xff, 0x7, 0x2]}, &(0x7f0000000200)=0x78) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) (async) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000140)={{}, 0x9}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f20c60f38c8f7ba2100b8f5ddef0f07ba4000ec66b99a0100000f3266b8008800000f23d80f21f86635400000100f23f8d96606362e660f38800264c4ba0000", 0x40}], 0x1, 0x6c, &(0x7f0000000100)=[@cr0={0x0, 0x40000029}], 0x1) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffc000/0x1000)=nil}) (rerun: 64) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000080)={@private, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000080)={@private, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000080)={@private, @broadcast}, &(0x7f00000000c0)=0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) (async) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000080)={@private, @broadcast}, &(0x7f00000000c0)=0xc) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f00000002c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/107, 0xc, 0x1, &(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000040)=0x40) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f00000002c0)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/107, 0xc, 0x1, &(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000040)=0x40) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f00000002c0)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/107, 0xc, 0x1, &(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000040)=0x40) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:35 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x1) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14f300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14f300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14f300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48200, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 07:18:36 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48200, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x220, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffd}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x501042, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000580)={{&(0x7f0000000500)={'Accelerator\x00', {&(0x7f0000000300)=@adf_dec={@bank={'Bank', '5', 'CoreAffinity\x00'}, {0x8}, {&(0x7f0000000240)=@adf_str={@normal='NumberDcInstances\x00', {"fe2afdba1d5bb6a7119ac36be479f0650392836b1102a7eae8ed7795488728b15f753c8293f4066db75471e267a636a04e4c44f459450a77d0446514df18f5c3"}}}}}, {&(0x7f0000000480)={'KERNEL\x00', {&(0x7f00000003c0)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"cd59dd422b1c228fddd9730cb264be5eee1ac9a832cbe526f3f449c92597ceccaabb2dcf80553df78e08c92ff7c5469cbb78fe7baab0d798bac5e5a016fab474"}}}}}}}, 0x8}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x220, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffd}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x501042, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000580)={{&(0x7f0000000500)={'Accelerator\x00', {&(0x7f0000000300)=@adf_dec={@bank={'Bank', '5', 'CoreAffinity\x00'}, {0x8}, {&(0x7f0000000240)=@adf_str={@normal='NumberDcInstances\x00', {"fe2afdba1d5bb6a7119ac36be479f0650392836b1102a7eae8ed7795488728b15f753c8293f4066db75471e267a636a04e4c44f459450a77d0446514df18f5c3"}}}}}, {&(0x7f0000000480)={'KERNEL\x00', {&(0x7f00000003c0)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"cd59dd422b1c228fddd9730cb264be5eee1ac9a832cbe526f3f449c92597ceccaabb2dcf80553df78e08c92ff7c5469cbb78fe7baab0d798bac5e5a016fab474"}}}}}}}, 0x8}) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x220, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffd}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x501042, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000580)={{&(0x7f0000000500)={'Accelerator\x00', {&(0x7f0000000300)=@adf_dec={@bank={'Bank', '5', 'CoreAffinity\x00'}, {0x8}, {&(0x7f0000000240)=@adf_str={@normal='NumberDcInstances\x00', {"fe2afdba1d5bb6a7119ac36be479f0650392836b1102a7eae8ed7795488728b15f753c8293f4066db75471e267a636a04e4c44f459450a77d0446514df18f5c3"}}}}}, {&(0x7f0000000480)={'KERNEL\x00', {&(0x7f00000003c0)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"cd59dd422b1c228fddd9730cb264be5eee1ac9a832cbe526f3f449c92597ceccaabb2dcf80553df78e08c92ff7c5469cbb78fe7baab0d798bac5e5a016fab474"}}}}}}}, 0x8}) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 07:18:37 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 07:18:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 07:18:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 07:18:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 07:18:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 07:18:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 07:18:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 07:18:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 07:18:38 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 07:18:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x80801) 07:18:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x80801) 07:18:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 07:18:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 07:18:38 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x40280) 07:18:38 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 07:18:39 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000080)) 07:18:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 07:18:39 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x9, 0x2) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x47, 0x40001) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/65, 0x41}) 07:18:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x6, "3094b6", 0x7f, 0x8a}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="85a9007d80000000000ee365460f07c443bd40ff0066baf80cb8b24bee85ef66bafc0c66b8000066efc744240200000000c744240005000000c744240265000000c7442406000000000f0114240f0114240f79976d1fa7fcc442c13ade66b87f008ed80f20e035000400000f22e0c482fd383e", 0x73}], 0xaaaaaaaaaaaaace, 0x60, &(0x7f0000000100)=[@efer={0x2, 0x400}, @dstype0={0x6, 0x6}], 0x2) 07:18:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/243, 0xf3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:39 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 07:18:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 07:18:39 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000080)) 07:18:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000005c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf2239f02ed79afcda00"/120], 0x78) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0xffffffffffffff6a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x165600, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000140)={0x101ff, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) 07:18:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:39 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 07:18:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) socket$inet_smc(0x2b, 0x1, 0x0) 07:18:39 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000080)) 07:18:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:39 executing program 2: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x6}, 0x0, {0x2, 0x4e22, @local}, 'gretap0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = socket(0x1f, 0xa, 0x1ff) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1d65ad45, 0x4) 07:18:39 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:18:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x72f382, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x17d) 07:18:39 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:39 executing program 5: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x6}, 0x0, {0x2, 0x4e22, @local}, 'gretap0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = socket(0x1f, 0xa, 0x1ff) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x1d65ad45, 0x4) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x7) 07:18:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 2: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:40 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) r3 = userfaultfd(0xaae5d58f60e5569c) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) userfaultfd(0xaae5d58f60e5569c) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xd2, 0x200000) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 07:18:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 07:18:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:40 executing program 3: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 07:18:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private1, @in6=@private1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) 07:18:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x460042, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1ff) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)={0x69, [0x100, 0x828], 0x6}, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/kvm\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/kvm\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000300)="650fc79a00000f01c83e0f01cf660f6a9706000f5c6e0266b9a70b00000f320f20c06635010000000f22c0baf80c66b81278e88b66efbafc0cb8de4aefa2b551bad004b058ee", 0x46}], 0x1, 0x4, &(0x7f0000000280)=[@cr0], 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x10000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000ffd000/0x1000)=nil}) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000880)=0xfd29) timerfd_gettime(r2, &(0x7f0000000040)) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:40 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x120001, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x7ff, 0x4, 0x6}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:41 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000080)='/dev/usbmon#\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x87, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 'wrr\x00', 0x0, 0x2, 0x22}, {@multicast1, 0x4e22, 0x1, 0x3, 0xfffff801, 0x5c85}}, 0x44) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) [ 2108.062492] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20004 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220440, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0xc, 0x101100) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0x61, ""/97}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000100)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x3a1eaf9b, 0x40001) 07:18:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) r6 = perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x20, 0x80, 0xfb, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000700), 0x2}, 0x202, 0xfffffffffffffff7, 0xe7b, 0x5, 0x40, 0x8001, 0x2, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x3f, 0x40, 0xff, 0x5, 0x0, 0x55, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x6, 0x6}, 0x80, 0x1, 0x101, 0x9, 0x401, 0x6, 0xfffe, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x1, r6, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x15dc80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=@getpolicy={0x3b8, 0x15, 0x20, 0x70bd28, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x4e22, 0x7ff, 0x4e23, 0xc08, 0x2, 0x0, 0xa0, 0x1d, 0x0, 0xee00}, 0x6e6bba, 0x1}, [@sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x4e23, 0x3, 0x4e23, 0x67, 0x2, 0x0, 0x20, 0x62, r9, 0xee01}, {@in6=@local, 0x4d6, 0x32}, @in=@multicast1, {0x1000, 0x7fffffff, 0x8, 0x8, 0x80000000, 0x841, 0xfffffffffffffffc, 0xffffffffffff0000}, {0x2, 0x5, 0xffff, 0xffffffffffff0000}, {0x1, 0xffffff9a, 0x4}, 0x70bd29, 0x3504, 0x2, 0x4, 0x7, 0x44}}, @algo_auth_trunc={0x128, 0x14, {{'wp256\x00'}, 0x6e0, 0x180, "e9a41ab9bd4bf6a2be7efd2565b7837639a017c38516f4e3cfe4ab5054586eb0ecb6d436462b2236153fa8969609a495dea909d892594dba8951a7c90c00b284105d6bfb4a4bc1be19911ca3831c2543f2061ec856b3b6f628074f04ae6294451298618124c8585f9c4a560dbc3a7f78ca5463713e7d201240b39579d0359eb80206a1eebd634669a144683406bbf260336c9e58388288d80cac7982fea3888c450b480348ef9d487ffa4328a256b56a88604502d3ae4b72eca93bfee055a5df9910b4c8c7b4ca80581930282bad4720b046791d7791466e3c2828cc"}}, @etimer_thresh={0x8, 0xc, 0x4}, @algo_auth={0xc8, 0x1, {{'blake2b-160-generic\x00'}, 0x400, "9c562fd0e176b2c6b1b140f0738ae6b7601b23069241d4e595215d17ea7025bcfd38504e3d7fb36e8af0b8ccd6c6c812d7494277d2c7c6d92421f451ade8c5812e39072746507787be30c5063c7300624f1c564daa20b1a1b57e4f89226ae3065ab3e82225bef35cffd2aa813133f7ece94e0c51094953cea615591ed05a8c0e"}}, @etimer_thresh={0x8, 0xc, 0x4}, @coaddr={0x14, 0xe, @in6=@private2}, @sec_ctx={0x70, 0x8, {0x6c, 0x8, 0x0, 0xff, 0x64, "6b5f50523e667d048c6a9fbbdbeafadfd7b95d322af9473924c6fb108ee745576d28876ca5fd77ba488daa150dd414221b89e5a10efbbf2190e9e2180be9391656ebc88230aa3f7a52235b4d0c00cdd36a0b3237c74ff2447d3d1ef7f63dbafc65b0e905"}}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) 07:18:41 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000100)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x3a1eaf9b, 0x40001) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000100)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x3a1eaf9b, 0x40001) 07:18:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000100)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r2, r3+60000000}, {0x77359400}}, &(0x7f0000000100)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 07:18:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r2, r3+60000000}, {0x77359400}}, &(0x7f0000000100)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 07:18:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{r2, r3+60000000}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 3: r0 = timerfd_create(0x4, 0xc00) timerfd_gettime(r0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8, 0x4) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) 07:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000002c0)="f20f350f208466b8010000000f01d96766c7442400be0200006766c7442402010000006766c744240600000000670f011c24660f388227b885000f00d066b9870400000f32650f0667d9f03e660f388087c2b0", 0x53}], 0x1, 0x20, &(0x7f0000000340), 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r3, 0x8) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x1f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000040)=0x5) 07:18:42 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 07:18:42 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xf46a0b9c0a4f2fc4, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 07:18:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) 07:18:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x8) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 3: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r0 = socket$inet(0x2, 0x0, 0x479b) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in, @in=@private}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000100)=0xfffffe27) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0xff, [0x200000000000000, 0xdec, 0x8, 0x3, 0x80000000, 0x1], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/255}, &(0x7f0000000300)=0x78) 07:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x465, 0x500000, 0x8, 0x414, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="8f497812c066ba200066ed42da488bb95f0b0000b891f60000ba000000000f300f20d835080000000f22d8f045092066baf80cb8b4d4d785ef66bafc0cedc4a17e2d5c7100f3470faee8b9800000c00f3235000100000f30", 0x58}], 0x1, 0x1, &(0x7f0000000180), 0x0) 07:18:42 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:42 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 07:18:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/247, 0xf7) 07:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r1, 0x8) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) 07:18:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 07:18:42 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x1010, r1, 0x8) 07:18:42 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 07:18:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 07:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) 07:18:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x40000) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80301, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x36, 0xb40) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x8) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 07:18:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) 07:18:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121240, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x5d1a60, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101402, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 0: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) 07:18:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket(0x26, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:43 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 0: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 07:18:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 0: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 07:18:43 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f32660f38de47000fae74a80f01ca660fc5d50b0f780036660f3831320f6590000066b9800000c00f326635000100000f30dde1", 0x34}], 0x1, 0x40, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, @dstype3={0x7, 0x8}], 0x2) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 0: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66baf80cb8cf37b384ef66bafc0cec260f794f00670f1c012667f30fd6ed0fc75ef70f090f0f04d20c26dceec4e3690e27030f01d1", 0x35}], 0x1, 0xa, &(0x7f00000000c0)=[@efer={0x2, 0x400}, @flags], 0x2) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) r5 = syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_buf(r6, 0x0, 0x28, &(0x7f00000005c0)=""/152, &(0x7f0000000680)=0x98) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 07:18:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x90f) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5}, 0x2) 07:18:43 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/176, 0xb0, 0x0, &(0x7f0000000200)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x0, 0x0, &(0x7f0000000100)) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) r5 = syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_buf(r6, 0x0, 0x28, &(0x7f00000005c0)=""/152, &(0x7f0000000680)=0x98) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x0, 0x0, &(0x7f0000000100)) 07:18:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/176, 0xb0, 0x0, &(0x7f0000000200)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10003, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 07:18:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x0, 0x0, &(0x7f0000000100)) 07:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:44 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) r5 = syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_buf(r6, 0x0, 0x28, &(0x7f00000005c0)=""/152, &(0x7f0000000680)=0x98) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 07:18:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/176, 0xb0, 0x0, &(0x7f0000000200)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) socket$inet(0x2, 0x1, 0x6) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 07:18:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) r5 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_buf(r5, 0x0, 0x28, &(0x7f00000005c0)=""/152, &(0x7f0000000680)=0x98) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 07:18:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/176, 0xb0, 0x0, &(0x7f0000000200)=""/4096, 0x1000}, &(0x7f0000001240)=0x40) 07:18:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a0e00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10ffffffffffffe) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="400f2146420fc771d166430fe2078f2840ce75f5bd0f0866b801000f00d866baf80cb8de984b8cef66bafc0c66b8000066ef470fc77ceb13c4a3c1696c29008b66baf80cb8e0967c86ef66bafc0ced", 0x4f}], 0x1, 0x40, &(0x7f0000000180), 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000080)={'veth0_to_team\x00'}) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xc0, [0x0, 0x2fc0, 0x1, 0x7, 0x45bf], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/192}, &(0x7f0000000280)=0x78) 07:18:44 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) r5 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000005c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:44 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) 07:18:44 executing program 2: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000aaa81dbf85830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa4e7cdecf06e60c6a86f5cdb6038fcd0362dbd54468946e233867294afac2f6473c1b8e18aa59f877ed5f62"], 0x78) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0xf000, 0x2000, &(0x7f0000ff9000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffa000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = socket(0x1f, 0x3, 0xffff0404) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x10001, 0x4) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 07:18:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xc0, [0x0, 0x2fc0, 0x1, 0x7, 0x45bf], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/192}, &(0x7f0000000280)=0x78) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:44 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) socket$inet(0x2, 0x3, 0x6) 07:18:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:44 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) 07:18:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xc0, [0x0, 0x2fc0, 0x1, 0x7, 0x45bf], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/192}, &(0x7f0000000280)=0x78) 07:18:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:44 executing program 2: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) 07:18:44 executing program 5: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0fc7370f01f026360f01c466ba2100ec0f201a3e3ef30fc77184f2d59bc4e2552e12360f3266baa00066b80f0066ef", 0x2f}], 0x1, 0x74, &(0x7f0000000100)=[@cr0={0x0, 0x10000}], 0x1) 07:18:45 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) 07:18:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 07:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 07:18:45 executing program 0: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) socket$inet(0x2, 0x3, 0x6) 07:18:45 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 07:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:45 executing program 2: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$binder(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffeffff) 07:18:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250500000008000700ffffffff08000c0000f735fec8000000080001002a2e2c0008000200050000001400060000000000000000000000ffffac1414aa06000b002b0000001400060000000000000000000000ffffe000000206000b000f000000"], 0x6c}}, 0x800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)='*.,\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000541a0f60d12c197d5ad1a38081df022f0771", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250700000014000500fc02000000000000000000000000000108000700e000000114000500fc00000000000000000000000000000108000700ac1414bb08000c00030000000800020005000000080004000300000008000c000300000008000400ffffffff"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:45 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) 07:18:45 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) 07:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:45 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 07:18:45 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) 07:18:45 executing program 5: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) 07:18:45 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) 07:18:45 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 07:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250500000008000700ffffffff08000c0000f735fec8000000080001002a2e2c0008000200050000001400060000000000000000000000ffffac1414aa06000b002b0000001400060000000000000000000000ffffe000000206000b000f000000"], 0x6c}}, 0x800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)='*.,\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000000541a0f60d12c197d5ad1a38081df022f0771", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf250700000014000500fc02000000000000000000000000000108000700e000000114000500fc00000000000000000000000000000108000700ac1414bb08000c00030000000800020005000000080004000300000008000c000300000008000400ffffffff"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:45 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) 07:18:45 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:45 executing program 5: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40) 07:18:45 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) 07:18:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) 07:18:45 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:45 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:45 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000440), 0x101, 0x303201) 07:18:45 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:45 executing program 5: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) 07:18:45 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:46 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:46 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:46 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:46 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 1) 07:18:46 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) 07:18:46 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:46 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:46 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 07:18:46 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 07:18:46 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:18:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:46 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) [ 2113.086417] FAULT_INJECTION: forcing a failure. [ 2113.086417] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.140257] CPU: 0 PID: 14555 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2113.148157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2113.157507] Call Trace: [ 2113.160093] dump_stack+0x1b2/0x281 [ 2113.163725] should_fail.cold+0x10a/0x149 [ 2113.167867] should_failslab+0xd6/0x130 [ 2113.171835] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2113.176488] ? dev_uevent_filter+0xd0/0xd0 [ 2113.180703] kobject_uevent_env+0x20c/0xf30 [ 2113.185021] ? wait_for_completion_io+0x10/0x10 [ 2113.189679] ? is_acpi_device_node+0x5b/0x70 [ 2113.194076] device_del+0x642/0xa80 [ 2113.197692] ? __device_links_no_driver+0x1b0/0x1b0 [ 2113.202707] device_unregister+0x22/0xc0 [ 2113.206752] bdi_unregister+0x42f/0x610 [ 2113.210717] ? wb_blkcg_offline+0x180/0x180 [ 2113.215029] del_gendisk+0x453/0x820 [ 2113.218728] ? disk_events_poll_msecs_store+0x150/0x150 [ 2113.224079] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2113.228561] ? blk_cleanup_queue+0x43c/0x620 [ 2113.232949] loop_control_ioctl+0x347/0x3f0 [ 2113.237250] ? loop_lookup+0x190/0x190 [ 2113.241119] ? SyS_write+0x1b7/0x210 [ 2113.244817] ? loop_lookup+0x190/0x190 [ 2113.248688] do_vfs_ioctl+0x75a/0xff0 [ 2113.252466] ? lock_acquire+0x170/0x3f0 [ 2113.256434] ? ioctl_preallocate+0x1a0/0x1a0 [ 2113.260832] ? __fget+0x265/0x3e0 [ 2113.264269] ? do_vfs_ioctl+0xff0/0xff0 [ 2113.268227] ? security_file_ioctl+0x83/0xb0 [ 2113.272623] SyS_ioctl+0x7f/0xb0 [ 2113.275973] ? do_vfs_ioctl+0xff0/0xff0 [ 2113.279931] do_syscall_64+0x1d5/0x640 [ 2113.283813] entry_SYSCALL_64_after_hwframe+0x46/0xbb 07:18:46 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:46 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 2113.288993] RIP: 0033:0x7f6b2ad1f209 [ 2113.292684] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2113.300408] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2113.307664] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2113.314918] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.322167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2113.329439] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 2) 07:18:46 executing program 3: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 07:18:46 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:46 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 07:18:46 executing program 3: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:46 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) 07:18:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) [ 2113.586316] FAULT_INJECTION: forcing a failure. [ 2113.586316] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.626223] CPU: 0 PID: 14610 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2113.634125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2113.643482] Call Trace: [ 2113.646067] dump_stack+0x1b2/0x281 [ 2113.649681] should_fail.cold+0x10a/0x149 [ 2113.653816] should_failslab+0xd6/0x130 [ 2113.657864] __kmalloc+0x2c1/0x400 [ 2113.661386] ? kobject_get_path+0xb5/0x230 [ 2113.665603] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 2113.671037] kobject_get_path+0xb5/0x230 [ 2113.675092] kobject_uevent_env+0x230/0xf30 [ 2113.679409] ? wait_for_completion_io+0x10/0x10 [ 2113.684069] ? is_acpi_device_node+0x5b/0x70 [ 2113.688473] device_del+0x642/0xa80 [ 2113.692093] ? __device_links_no_driver+0x1b0/0x1b0 [ 2113.697093] device_unregister+0x22/0xc0 [ 2113.701135] bdi_unregister+0x42f/0x610 [ 2113.705097] ? wb_blkcg_offline+0x180/0x180 [ 2113.709412] del_gendisk+0x453/0x820 [ 2113.713108] ? disk_events_poll_msecs_store+0x150/0x150 [ 2113.718454] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2113.723030] ? blk_cleanup_queue+0x43c/0x620 [ 2113.727439] loop_control_ioctl+0x347/0x3f0 [ 2113.731742] ? loop_lookup+0x190/0x190 [ 2113.735609] ? SyS_write+0x1b7/0x210 [ 2113.739302] ? loop_lookup+0x190/0x190 [ 2113.743168] do_vfs_ioctl+0x75a/0xff0 [ 2113.746951] ? lock_acquire+0x170/0x3f0 [ 2113.750905] ? ioctl_preallocate+0x1a0/0x1a0 [ 2113.755293] ? __fget+0x265/0x3e0 [ 2113.758725] ? do_vfs_ioctl+0xff0/0xff0 [ 2113.762680] ? security_file_ioctl+0x83/0xb0 [ 2113.767067] SyS_ioctl+0x7f/0xb0 [ 2113.770412] ? do_vfs_ioctl+0xff0/0xff0 [ 2113.774397] do_syscall_64+0x1d5/0x640 [ 2113.778268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2113.783449] RIP: 0033:0x7f6b2ad1f209 07:18:47 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 07:18:47 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2113.787146] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2113.794852] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2113.802106] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2113.809361] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.816628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2113.823889] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 3) 07:18:47 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) 07:18:47 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 07:18:47 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 07:18:47 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="ba3c47dc02a656218909e4ab9e46f5f6cbb090c8ee5e151c91ed2e8e3532d30a5b4c162bba44fa2667d5851b2af011915d866c815e48af799aa37c656c2bf79976fdfea247844dbb5214d8cb2099d773089c1e985ca9b8d7954731bab7e911bc354dc951c8b1033f", 0x68, 0x4, 0x0) [ 2114.053443] FAULT_INJECTION: forcing a failure. [ 2114.053443] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.078768] CPU: 1 PID: 14648 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2114.086670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2114.096024] Call Trace: [ 2114.098610] dump_stack+0x1b2/0x281 [ 2114.102245] should_fail.cold+0x10a/0x149 [ 2114.106395] should_failslab+0xd6/0x130 [ 2114.110373] kmem_cache_alloc_node+0x263/0x410 [ 2114.114956] __alloc_skb+0x5c/0x510 [ 2114.118669] kobject_uevent_env+0x882/0xf30 [ 2114.123025] ? is_acpi_device_node+0x5b/0x70 [ 2114.127434] device_del+0x642/0xa80 [ 2114.131178] ? __device_links_no_driver+0x1b0/0x1b0 [ 2114.136201] device_unregister+0x22/0xc0 [ 2114.140265] bdi_unregister+0x42f/0x610 [ 2114.144247] ? wb_blkcg_offline+0x180/0x180 [ 2114.148579] del_gendisk+0x453/0x820 [ 2114.152306] ? disk_events_poll_msecs_store+0x150/0x150 [ 2114.157679] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2114.162294] ? blk_cleanup_queue+0x43c/0x620 [ 2114.166702] loop_control_ioctl+0x347/0x3f0 [ 2114.171024] ? loop_lookup+0x190/0x190 [ 2114.174907] ? SyS_write+0x1b7/0x210 [ 2114.178626] ? loop_lookup+0x190/0x190 [ 2114.182517] do_vfs_ioctl+0x75a/0xff0 [ 2114.186322] ? lock_acquire+0x170/0x3f0 [ 2114.190300] ? ioctl_preallocate+0x1a0/0x1a0 [ 2114.194713] ? __fget+0x265/0x3e0 [ 2114.198165] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.202144] ? security_file_ioctl+0x83/0xb0 [ 2114.206550] SyS_ioctl+0x7f/0xb0 [ 2114.209913] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.213888] do_syscall_64+0x1d5/0x640 [ 2114.217779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2114.222962] RIP: 0033:0x7f6b2ad1f209 [ 2114.226666] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2114.234371] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2114.241637] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2114.248902] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2114.256166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.263427] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:47 executing program 3: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) 07:18:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 4) 07:18:47 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 07:18:47 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 07:18:47 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:47 executing program 0: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) 07:18:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 07:18:47 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:47 executing program 3: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2114.578983] FAULT_INJECTION: forcing a failure. [ 2114.578983] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.618499] CPU: 1 PID: 14694 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2114.626409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2114.635759] Call Trace: [ 2114.638385] dump_stack+0x1b2/0x281 [ 2114.642017] should_fail.cold+0x10a/0x149 [ 2114.646167] should_failslab+0xd6/0x130 [ 2114.650145] kmem_cache_alloc_node+0x263/0x410 [ 2114.654729] __alloc_skb+0x5c/0x510 [ 2114.658362] kobject_uevent_env+0x882/0xf30 [ 2114.662695] ? is_acpi_device_node+0x5b/0x70 [ 2114.667107] device_del+0x642/0xa80 [ 2114.670735] ? __device_links_no_driver+0x1b0/0x1b0 [ 2114.675757] device_unregister+0x22/0xc0 [ 2114.679831] bdi_unregister+0x42f/0x610 [ 2114.683810] ? wb_blkcg_offline+0x180/0x180 [ 2114.688136] del_gendisk+0x453/0x820 [ 2114.691849] ? disk_events_poll_msecs_store+0x150/0x150 [ 2114.697210] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2114.701707] ? blk_cleanup_queue+0x43c/0x620 [ 2114.706114] loop_control_ioctl+0x347/0x3f0 [ 2114.710437] ? loop_lookup+0x190/0x190 [ 2114.714319] ? SyS_write+0x1b7/0x210 [ 2114.718035] ? loop_lookup+0x190/0x190 [ 2114.721922] do_vfs_ioctl+0x75a/0xff0 [ 2114.725721] ? lock_acquire+0x170/0x3f0 [ 2114.729699] ? ioctl_preallocate+0x1a0/0x1a0 [ 2114.734105] ? __fget+0x265/0x3e0 [ 2114.737556] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.741533] ? security_file_ioctl+0x83/0xb0 [ 2114.745940] SyS_ioctl+0x7f/0xb0 [ 2114.749301] ? do_vfs_ioctl+0xff0/0xff0 [ 2114.753276] do_syscall_64+0x1d5/0x640 [ 2114.757163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2114.762364] RIP: 0033:0x7f6b2ad1f209 [ 2114.766179] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:18:48 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 07:18:48 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:48 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2114.773898] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2114.781163] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2114.788435] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2114.795706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.802974] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:48 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 5) 07:18:48 executing program 3: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) clock_gettime(0x2, &(0x7f0000000580)) 07:18:48 executing program 0: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:48 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:48 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2115.078290] FAULT_INJECTION: forcing a failure. [ 2115.078290] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.098384] CPU: 1 PID: 14757 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2115.106288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2115.115640] Call Trace: [ 2115.118233] dump_stack+0x1b2/0x281 [ 2115.121867] should_fail.cold+0x10a/0x149 [ 2115.126017] should_failslab+0xd6/0x130 [ 2115.129995] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2115.135104] __kmalloc_node_track_caller+0x38/0x70 [ 2115.140127] __alloc_skb+0x96/0x510 [ 2115.143764] kobject_uevent_env+0x882/0xf30 [ 2115.148094] ? is_acpi_device_node+0x5b/0x70 [ 2115.152511] device_del+0x642/0xa80 [ 2115.156143] ? __device_links_no_driver+0x1b0/0x1b0 [ 2115.161169] device_unregister+0x22/0xc0 [ 2115.165243] bdi_unregister+0x42f/0x610 [ 2115.169229] ? wb_blkcg_offline+0x180/0x180 [ 2115.173560] del_gendisk+0x453/0x820 [ 2115.177287] ? disk_events_poll_msecs_store+0x150/0x150 [ 2115.182748] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2115.187248] ? blk_cleanup_queue+0x43c/0x620 [ 2115.191667] loop_control_ioctl+0x347/0x3f0 [ 2115.196079] ? loop_lookup+0x190/0x190 [ 2115.199969] ? SyS_write+0x1b7/0x210 [ 2115.203700] ? loop_lookup+0x190/0x190 [ 2115.207683] do_vfs_ioctl+0x75a/0xff0 [ 2115.211487] ? lock_acquire+0x170/0x3f0 [ 2115.215465] ? ioctl_preallocate+0x1a0/0x1a0 [ 2115.219875] ? __fget+0x265/0x3e0 [ 2115.223329] ? do_vfs_ioctl+0xff0/0xff0 [ 2115.227307] ? security_file_ioctl+0x83/0xb0 [ 2115.231724] SyS_ioctl+0x7f/0xb0 [ 2115.235094] ? do_vfs_ioctl+0xff0/0xff0 [ 2115.239068] do_syscall_64+0x1d5/0x640 [ 2115.242959] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2115.248147] RIP: 0033:0x7f6b2ad1f209 [ 2115.251855] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2115.259560] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2115.266827] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 07:18:48 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2115.274102] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2115.281384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2115.288654] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 07:18:48 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 07:18:48 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 6) 07:18:48 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 1) 07:18:48 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 07:18:48 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2115.483134] FAULT_INJECTION: forcing a failure. [ 2115.483134] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.515671] FAULT_INJECTION: forcing a failure. [ 2115.515671] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.525404] CPU: 0 PID: 14819 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 2115.534757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2115.544110] Call Trace: [ 2115.546703] dump_stack+0x1b2/0x281 [ 2115.550367] should_fail.cold+0x10a/0x149 [ 2115.554605] should_failslab+0xd6/0x130 [ 2115.558620] kmem_cache_alloc+0x28e/0x3c0 [ 2115.562854] __split_vma+0xc8/0x6c0 [ 2115.566486] do_munmap+0x25b/0xc30 [ 2115.570024] SyS_mremap+0x877/0xd70 [ 2115.573647] ? __mutex_unlock_slowpath+0x75/0x770 [ 2115.578484] ? move_page_tables+0x60/0x60 [ 2115.582661] ? wait_for_common_io.constprop.0+0x310/0x390 [ 2115.588284] ? vfs_write+0x319/0x4d0 [ 2115.591994] ? fput_many+0xe/0x140 [ 2115.595528] ? SyS_write+0x14d/0x210 [ 2115.599273] ? SyS_read+0x210/0x210 [ 2115.602889] ? __do_page_fault+0x159/0xad0 [ 2115.607117] ? do_syscall_64+0x4c/0x640 [ 2115.611078] ? move_page_tables+0x60/0x60 [ 2115.615340] do_syscall_64+0x1d5/0x640 [ 2115.619230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2115.624407] RIP: 0033:0x7f2da4cbd209 07:18:48 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) (async) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) [ 2115.628126] RSP: 002b:00007f2da3632168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2115.635824] RAX: ffffffffffffffda RBX: 00007f2da4dcff60 RCX: 00007f2da4cbd209 [ 2115.643107] RDX: 0000000000003000 RSI: 0000000000002000 RDI: 0000000020ff4000 [ 2115.650372] RBP: 00007f2da36321d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2115.657683] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2115.664949] R13: 00007ffd3eb1ffdf R14: 00007f2da3632300 R15: 0000000000022000 07:18:48 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:48 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 2) 07:18:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2115.680456] CPU: 1 PID: 14808 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2115.688409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2115.697845] Call Trace: [ 2115.700432] dump_stack+0x1b2/0x281 [ 2115.704064] should_fail.cold+0x10a/0x149 [ 2115.708220] should_failslab+0xd6/0x130 [ 2115.712204] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2115.717318] __kmalloc_node_track_caller+0x38/0x70 [ 2115.722256] __alloc_skb+0x96/0x510 [ 2115.725883] kobject_uevent_env+0x882/0xf30 [ 2115.730214] device_del+0x642/0xa80 [ 2115.733851] ? __device_links_no_driver+0x1b0/0x1b0 [ 2115.738870] device_unregister+0x22/0xc0 [ 2115.742936] bdi_unregister+0x42f/0x610 [ 2115.746952] ? wb_blkcg_offline+0x180/0x180 [ 2115.751268] del_gendisk+0x453/0x820 [ 2115.754968] ? disk_events_poll_msecs_store+0x150/0x150 [ 2115.760315] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2115.764791] ? blk_cleanup_queue+0x43c/0x620 [ 2115.769308] loop_control_ioctl+0x347/0x3f0 [ 2115.773623] ? loop_lookup+0x190/0x190 [ 2115.777499] ? SyS_write+0x1b7/0x210 07:18:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) [ 2115.781203] ? loop_lookup+0x190/0x190 [ 2115.785086] do_vfs_ioctl+0x75a/0xff0 [ 2115.788888] ? lock_acquire+0x170/0x3f0 [ 2115.792861] ? ioctl_preallocate+0x1a0/0x1a0 [ 2115.797274] ? __fget+0x265/0x3e0 [ 2115.800733] ? do_vfs_ioctl+0xff0/0xff0 [ 2115.804712] ? security_file_ioctl+0x83/0xb0 [ 2115.809123] SyS_ioctl+0x7f/0xb0 [ 2115.812491] ? do_vfs_ioctl+0xff0/0xff0 [ 2115.816464] do_syscall_64+0x1d5/0x640 [ 2115.820354] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2115.825539] RIP: 0033:0x7f6b2ad1f209 [ 2115.829312] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2115.837017] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2115.844286] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2115.851555] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2115.858825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2115.866102] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:49 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 07:18:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 7) [ 2115.991130] FAULT_INJECTION: forcing a failure. [ 2115.991130] name failslab, interval 1, probability 0, space 0, times 0 07:18:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) r4 = timerfd_create(0x0, 0x81800) timerfd_settime(r4, 0x2, &(0x7f0000000400)={{}, {0x0, 0x989680}}, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000070000129500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000100)=""/130, 0x40f00, 0x11, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x3, 0xff}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, r3, 0x1]}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 2116.048435] CPU: 1 PID: 14850 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 2116.056345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2116.065702] Call Trace: [ 2116.068299] dump_stack+0x1b2/0x281 [ 2116.071935] should_fail.cold+0x10a/0x149 [ 2116.076084] should_failslab+0xd6/0x130 [ 2116.080068] kmem_cache_alloc+0x28e/0x3c0 [ 2116.084223] __split_vma+0xc8/0x6c0 [ 2116.087855] do_munmap+0x2bc/0xc30 [ 2116.091396] SyS_mremap+0x877/0xd70 [ 2116.095030] ? __mutex_unlock_slowpath+0x75/0x770 [ 2116.099871] ? move_page_tables+0x60/0x60 [ 2116.104021] ? wait_for_common_io.constprop.0+0x310/0x390 [ 2116.109553] ? vfs_write+0x319/0x4d0 [ 2116.113258] ? fput_many+0xe/0x140 [ 2116.116784] ? SyS_write+0x14d/0x210 [ 2116.120486] ? SyS_read+0x210/0x210 [ 2116.124097] ? __do_page_fault+0x159/0xad0 [ 2116.128314] ? do_syscall_64+0x4c/0x640 [ 2116.132274] ? move_page_tables+0x60/0x60 [ 2116.136409] do_syscall_64+0x1d5/0x640 [ 2116.140286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2116.145466] RIP: 0033:0x7f2da4cbd209 [ 2116.149159] RSP: 002b:00007f2da3632168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2116.156852] RAX: ffffffffffffffda RBX: 00007f2da4dcff60 RCX: 00007f2da4cbd209 [ 2116.164206] RDX: 0000000000003000 RSI: 0000000000002000 RDI: 0000000020ff4000 [ 2116.171457] RBP: 00007f2da36321d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2116.178799] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2116.186052] R13: 00007ffd3eb1ffdf R14: 00007f2da3632300 R15: 0000000000022000 07:18:49 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 3) [ 2116.243016] FAULT_INJECTION: forcing a failure. [ 2116.243016] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.264980] CPU: 0 PID: 14860 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2116.272886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2116.282247] Call Trace: [ 2116.284837] dump_stack+0x1b2/0x281 [ 2116.288471] should_fail.cold+0x10a/0x149 [ 2116.292627] should_failslab+0xd6/0x130 [ 2116.296610] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2116.301721] __kmalloc_node_track_caller+0x38/0x70 [ 2116.306684] __alloc_skb+0x96/0x510 [ 2116.310313] kobject_uevent_env+0x882/0xf30 [ 2116.314640] device_del+0x642/0xa80 [ 2116.318276] ? __device_links_no_driver+0x1b0/0x1b0 [ 2116.323295] device_unregister+0x22/0xc0 [ 2116.327443] bdi_unregister+0x42f/0x610 [ 2116.331419] ? wb_blkcg_offline+0x180/0x180 [ 2116.335743] del_gendisk+0x453/0x820 [ 2116.339458] ? disk_events_poll_msecs_store+0x150/0x150 [ 2116.344908] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2116.349409] ? blk_cleanup_queue+0x43c/0x620 [ 2116.353818] loop_control_ioctl+0x347/0x3f0 [ 2116.358140] ? loop_lookup+0x190/0x190 [ 2116.362063] ? SyS_write+0x1b7/0x210 [ 2116.365780] ? loop_lookup+0x190/0x190 [ 2116.369675] do_vfs_ioctl+0x75a/0xff0 [ 2116.373512] ? lock_acquire+0x170/0x3f0 [ 2116.377487] ? ioctl_preallocate+0x1a0/0x1a0 [ 2116.381898] ? __fget+0x265/0x3e0 [ 2116.385353] ? do_vfs_ioctl+0xff0/0xff0 [ 2116.389329] ? security_file_ioctl+0x83/0xb0 [ 2116.393738] SyS_ioctl+0x7f/0xb0 [ 2116.397102] ? do_vfs_ioctl+0xff0/0xff0 [ 2116.401131] do_syscall_64+0x1d5/0x640 [ 2116.405023] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2116.410226] RIP: 0033:0x7f6b2ad1f209 [ 2116.413932] RSP: 002b:00007f6b29673168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2116.421639] RAX: ffffffffffffffda RBX: 00007f6b2ae32030 RCX: 00007f6b2ad1f209 [ 2116.428911] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2116.436179] RBP: 00007f6b296731d0 R08: 0000000000000000 R09: 0000000000000000 07:18:49 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 8) [ 2116.443459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2116.450727] R13: 00007ffd03e9ac0f R14: 00007f6b29673300 R15: 0000000000022000 07:18:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) r4 = timerfd_create(0x0, 0x81800) timerfd_settime(r4, 0x2, &(0x7f0000000400)={{}, {0x0, 0x989680}}, &(0x7f0000000440)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000070000129500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000100)=""/130, 0x40f00, 0x11, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x3, 0xff}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, r3, 0x1]}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 2116.520137] FAULT_INJECTION: forcing a failure. [ 2116.520137] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.575557] CPU: 0 PID: 14893 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 2116.583467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2116.592828] Call Trace: [ 2116.595418] dump_stack+0x1b2/0x281 [ 2116.599067] should_fail.cold+0x10a/0x149 [ 2116.603234] should_failslab+0xd6/0x130 [ 2116.607215] kmem_cache_alloc+0x28e/0x3c0 [ 2116.611368] __split_vma+0xc8/0x6c0 [ 2116.615042] do_munmap+0x25b/0xc30 [ 2116.618592] move_vma+0x4e3/0x800 [ 2116.622056] ? move_page_tables.part.0+0x17d0/0x17d0 [ 2116.627158] ? cap_mmap_addr+0x42/0x2d0 [ 2116.631134] ? arch_get_unmapped_area+0x800/0x800 [ 2116.635974] ? security_mmap_addr+0x73/0xa0 [ 2116.640522] SyS_mremap+0x9e9/0xd70 [ 2116.644159] ? __mutex_unlock_slowpath+0x75/0x770 [ 2116.649009] ? move_page_tables+0x60/0x60 [ 2116.653165] ? wait_for_common_io.constprop.0+0x310/0x390 [ 2116.658711] ? vfs_write+0x319/0x4d0 [ 2116.662431] ? fput_many+0xe/0x140 [ 2116.665978] ? SyS_write+0x14d/0x210 [ 2116.669692] ? SyS_read+0x210/0x210 [ 2116.673321] ? __do_page_fault+0x159/0xad0 [ 2116.677554] ? do_syscall_64+0x4c/0x640 [ 2116.681527] ? move_page_tables+0x60/0x60 [ 2116.685680] do_syscall_64+0x1d5/0x640 [ 2116.689577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2116.694756] RIP: 0033:0x7f2da4cbd209 [ 2116.698454] RSP: 002b:00007f2da3632168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2116.706149] RAX: ffffffffffffffda RBX: 00007f2da4dcff60 RCX: 00007f2da4cbd209 [ 2116.713404] RDX: 0000000000003000 RSI: 0000000000002000 RDI: 0000000020ff4000 07:18:49 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_dec={@format={'Dc', '0', 'RingAsymTx\x00'}, {0x8}, {&(0x7f0000000040)=@adf_str={@format={'Dc', '1', 'RingTx\x00'}, {"40f1dc82c38f1bb3993e1eabab4629d7ddb04a698eac15352e67c4a5c824961f59ebb8083764e80b8d6574ae6a7a0f5ae045da998229f61d10fe96758036dd74"}}}}}, {&(0x7f00000001c0)={'Accelerator\x00'}}}}, 0x9}) [ 2116.720658] RBP: 00007f2da36321d0 R08: 0000000020ffc000 R09: 0000000000000000 [ 2116.727913] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2116.735163] R13: 00007ffd3eb1ffdf R14: 00007f2da3632300 R15: 0000000000022000 [ 2116.780803] FAULT_INJECTION: forcing a failure. [ 2116.780803] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.794249] CPU: 0 PID: 14908 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2116.802141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2116.811493] Call Trace: [ 2116.814092] dump_stack+0x1b2/0x281 [ 2116.817726] should_fail.cold+0x10a/0x149 [ 2116.821889] should_failslab+0xd6/0x130 [ 2116.825874] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2116.830983] __kmalloc_node_track_caller+0x38/0x70 [ 2116.835915] __alloc_skb+0x96/0x510 [ 2116.839564] kobject_uevent_env+0x882/0xf30 [ 2116.843895] device_del+0x642/0xa80 [ 2116.847535] ? __device_links_no_driver+0x1b0/0x1b0 [ 2116.852568] device_unregister+0x22/0xc0 [ 2116.856637] bdi_unregister+0x42f/0x610 [ 2116.860620] ? wb_blkcg_offline+0x180/0x180 [ 2116.864948] del_gendisk+0x453/0x820 [ 2116.868652] ? disk_events_poll_msecs_store+0x150/0x150 [ 2116.874003] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2116.878576] ? blk_cleanup_queue+0x43c/0x620 [ 2116.883067] loop_control_ioctl+0x347/0x3f0 [ 2116.887379] ? loop_lookup+0x190/0x190 [ 2116.891251] ? SyS_write+0x1b7/0x210 [ 2116.894949] ? loop_lookup+0x190/0x190 [ 2116.898821] do_vfs_ioctl+0x75a/0xff0 [ 2116.902605] ? lock_acquire+0x170/0x3f0 [ 2116.906579] ? ioctl_preallocate+0x1a0/0x1a0 [ 2116.910989] ? __fget+0x265/0x3e0 [ 2116.914428] ? do_vfs_ioctl+0xff0/0xff0 [ 2116.918392] ? security_file_ioctl+0x83/0xb0 [ 2116.922811] SyS_ioctl+0x7f/0xb0 [ 2116.926165] ? do_vfs_ioctl+0xff0/0xff0 [ 2116.930127] do_syscall_64+0x1d5/0x640 [ 2116.934005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2116.939179] RIP: 0033:0x7f6b2ad1f209 [ 2116.942874] RSP: 002b:00007f6b29673168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2116.950565] RAX: ffffffffffffffda RBX: 00007f6b2ae32030 RCX: 00007f6b2ad1f209 [ 2116.957816] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2116.965082] RBP: 00007f6b296731d0 R08: 0000000000000000 R09: 0000000000000000 [ 2116.972339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:18:50 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 4) [ 2116.979706] R13: 00007ffd03e9ac0f R14: 00007f6b29673300 R15: 0000000000022000 07:18:50 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 9) 07:18:50 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:50 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) r4 = timerfd_create(0x0, 0x81800) timerfd_settime(r4, 0x2, &(0x7f0000000400)={{}, {0x0, 0x989680}}, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000070000129500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000100)=""/130, 0x40f00, 0x11, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x4, 0x3, 0xff}, 0x10, 0x0, r2, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, r3, 0x1]}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 2117.099369] FAULT_INJECTION: forcing a failure. [ 2117.099369] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.128110] FAULT_INJECTION: forcing a failure. [ 2117.128110] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.156828] CPU: 0 PID: 14925 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2117.164904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2117.174253] Call Trace: [ 2117.176843] dump_stack+0x1b2/0x281 [ 2117.180471] should_fail.cold+0x10a/0x149 [ 2117.184662] should_failslab+0xd6/0x130 [ 2117.188642] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2117.193755] __kmalloc_node_track_caller+0x38/0x70 [ 2117.198689] __alloc_skb+0x96/0x510 [ 2117.202323] kobject_uevent_env+0x882/0xf30 [ 2117.206653] device_del+0x642/0xa80 [ 2117.210281] ? __device_links_no_driver+0x1b0/0x1b0 [ 2117.215295] device_unregister+0x22/0xc0 [ 2117.219359] bdi_unregister+0x42f/0x610 [ 2117.223330] ? wb_blkcg_offline+0x180/0x180 [ 2117.227655] del_gendisk+0x453/0x820 [ 2117.231367] ? disk_events_poll_msecs_store+0x150/0x150 [ 2117.236730] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2117.241224] ? blk_cleanup_queue+0x43c/0x620 [ 2117.245630] loop_control_ioctl+0x347/0x3f0 [ 2117.249971] ? loop_lookup+0x190/0x190 [ 2117.253881] ? SyS_write+0x1b7/0x210 [ 2117.257601] ? loop_lookup+0x190/0x190 [ 2117.261503] do_vfs_ioctl+0x75a/0xff0 [ 2117.265311] ? lock_acquire+0x170/0x3f0 [ 2117.269283] ? ioctl_preallocate+0x1a0/0x1a0 [ 2117.273685] ? __fget+0x265/0x3e0 [ 2117.277132] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.281102] ? security_file_ioctl+0x83/0xb0 [ 2117.285507] SyS_ioctl+0x7f/0xb0 [ 2117.288872] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.292850] do_syscall_64+0x1d5/0x640 [ 2117.296750] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2117.301937] RIP: 0033:0x7f6b2ad1f209 [ 2117.305638] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.313347] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2117.320619] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2117.327892] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2117.335164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2117.342434] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200840) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) [ 2117.350657] CPU: 1 PID: 14928 Comm: syz-executor.0 Not tainted 4.14.289-syzkaller #0 [ 2117.358548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2117.367894] Call Trace: [ 2117.370479] dump_stack+0x1b2/0x281 [ 2117.374114] should_fail.cold+0x10a/0x149 [ 2117.378266] should_failslab+0xd6/0x130 [ 2117.382240] kmem_cache_alloc+0x28e/0x3c0 [ 2117.386390] __split_vma+0xc8/0x6c0 [ 2117.390108] do_munmap+0x2bc/0xc30 [ 2117.393651] move_vma+0x4e3/0x800 [ 2117.397105] ? move_page_tables.part.0+0x17d0/0x17d0 [ 2117.402217] ? cap_mmap_addr+0x42/0x2d0 07:18:50 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 10) [ 2117.406196] ? arch_get_unmapped_area+0x800/0x800 [ 2117.411038] ? security_mmap_addr+0x73/0xa0 [ 2117.415366] SyS_mremap+0x9e9/0xd70 [ 2117.419003] ? __mutex_unlock_slowpath+0x75/0x770 [ 2117.423848] ? move_page_tables+0x60/0x60 [ 2117.428001] ? wait_for_common_io.constprop.0+0x310/0x390 [ 2117.433539] ? vfs_write+0x319/0x4d0 [ 2117.437252] ? fput_many+0xe/0x140 [ 2117.440791] ? SyS_write+0x14d/0x210 [ 2117.444504] ? SyS_read+0x210/0x210 [ 2117.448129] ? __do_page_fault+0x159/0xad0 [ 2117.452363] ? do_syscall_64+0x4c/0x640 07:18:50 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:50 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r4, 0x40096102, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2117.456333] ? move_page_tables+0x60/0x60 [ 2117.460481] do_syscall_64+0x1d5/0x640 [ 2117.464374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2117.469559] RIP: 0033:0x7f2da4cbd209 [ 2117.473264] RSP: 002b:00007f2da3632168 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2117.480973] RAX: ffffffffffffffda RBX: 00007f2da4dcff60 RCX: 00007f2da4cbd209 [ 2117.488329] RDX: 0000000000003000 RSI: 0000000000002000 RDI: 0000000020ff4000 [ 2117.495591] RBP: 00007f2da36321d0 R08: 0000000020ffc000 R09: 0000000000000000 07:18:50 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:50 executing program 0: mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) (fail_nth: 5) [ 2117.502860] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2117.510132] R13: 00007ffd3eb1ffdf R14: 00007f2da3632300 R15: 0000000000022000 [ 2117.542888] FAULT_INJECTION: forcing a failure. [ 2117.542888] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.565671] CPU: 0 PID: 14959 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2117.573580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2117.582938] Call Trace: [ 2117.585532] dump_stack+0x1b2/0x281 [ 2117.589514] should_fail.cold+0x10a/0x149 [ 2117.593677] should_failslab+0xd6/0x130 [ 2117.597658] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2117.602769] __kmalloc_node_track_caller+0x38/0x70 [ 2117.607699] __alloc_skb+0x96/0x510 [ 2117.611334] kobject_uevent_env+0x882/0xf30 [ 2117.615664] device_del+0x642/0xa80 [ 2117.619311] ? __device_links_no_driver+0x1b0/0x1b0 [ 2117.624333] device_unregister+0x22/0xc0 [ 2117.628400] bdi_unregister+0x42f/0x610 [ 2117.632381] ? wb_blkcg_offline+0x180/0x180 [ 2117.636714] del_gendisk+0x453/0x820 [ 2117.640437] ? disk_events_poll_msecs_store+0x150/0x150 [ 2117.645808] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2117.650311] ? blk_cleanup_queue+0x43c/0x620 [ 2117.654739] loop_control_ioctl+0x347/0x3f0 [ 2117.659061] ? loop_lookup+0x190/0x190 [ 2117.662973] ? SyS_write+0x1b7/0x210 [ 2117.666810] ? loop_lookup+0x190/0x190 [ 2117.670702] do_vfs_ioctl+0x75a/0xff0 [ 2117.674506] ? lock_acquire+0x170/0x3f0 [ 2117.678487] ? ioctl_preallocate+0x1a0/0x1a0 [ 2117.682898] ? __fget+0x265/0x3e0 [ 2117.686356] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.690336] ? security_file_ioctl+0x83/0xb0 [ 2117.694744] SyS_ioctl+0x7f/0xb0 [ 2117.698112] ? do_vfs_ioctl+0xff0/0xff0 [ 2117.702175] do_syscall_64+0x1d5/0x640 [ 2117.706067] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2117.711255] RIP: 0033:0x7f6b2ad1f209 07:18:51 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 11) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2117.715017] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2117.722812] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2117.730081] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2117.737350] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2117.744618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2117.751899] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:51 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000001480)=[{&(0x7f00000000c0)="ce1162f81e1b7a4ecceacf30051f19b5301f33600e56161a88159822125d9a27d8b5ca42b57928a6419cc2297de8ed03c174c28c850161e99e22a85699c9b6ec50ab5103e92f153b7b839580b12ee9ba3ab1053efc3ddac4fab593cdf0d4bca13be78e60e01b09beefb239aae17fc1c9a6ad07c20ad5a4cc34a9c237fdb5623061112922ff46a04559092d52def25b1b2fba50dfc2ee48deffadd1cdf9b26613fed5d885655014e738457fb5918e929261de6ea6b576175079dd941abc2fe161e75ea6bc", 0xc4, 0x5}, {&(0x7f00000001c0)="9640f70624c29b4af614482c8f05325d3d12e91986bc7e481d03fe87b741b89028f3565e45f05c5d1758a1fa066e6c664a84261c2c1bc86c653b0ccdd2e5d02a0a3c38c99db16b0560943342e39dda299c417af90df9a65d8a8629c81b933752a4518c7fb8deee498c8a61890ff492dcef0fd7bf33b5f1b522311478e9e33e5662e60f6844f92a8ca0580bfb37a1d42a82eb1c4c83c3078e075ce2f372ebfed08894d625fc0e79697e51f2c5d747cf0a4f68cad85d4da7c54bc39feca263f706fe99", 0xc2, 0xd41}, {&(0x7f00000002c0)="94b3a5567ed08fbe49a6eaac5b4d3f42b3a0e8e9ee959443a6cc19e9d2a5cd3e7e507439394e00c3b46ad02154305c2ca51189f74d9792f5f492cc6b7f6158997f36d0fea080c09fc76e244a9901a3156726be2c", 0x54, 0x1f}, {&(0x7f0000000340)="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", 0x1000, 0xfffffffffffffb48}, {&(0x7f0000001340)="8b13739c7c0680606355f90568a1507d78b3a3ce6f9a142e6f54900f0374a9d31caaf66e25d0673b3ccfdb3f12b5a5bdbcaf47d2c9767cc0beecb6852cf8392a991752b9b97ff56ee36690e18d3617fe78b429f065f47c969edd3ab15ea3355d791ac3c11aff628697ada03e82e4d7c652055b7882470e3f71b559263c2c80301c3f25453a5d08870206c71a43772c81149225a430905fbd0453ba0b6218d3ede3ca0076a951e4fd6900dfafb2c9f274a8", 0xb1, 0x5}, {&(0x7f0000001400)="5e0cbc34d484b3fa8acd7f2bf1bd743f8582069c633d431228f7d6b8c20f5b4725c658ac13a5e5fa8b45e68e33bc45116f04e21e1d992aa206c1d37b41a491ac3023d3e6e04300b1d3f968b695c6d6", 0x4f, 0x9}]) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2117.924295] FAULT_INJECTION: forcing a failure. [ 2117.924295] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.956945] CPU: 0 PID: 14991 Comm: syz-executor.5 Not tainted 4.14.289-syzkaller #0 [ 2117.964863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2117.974220] Call Trace: [ 2117.976812] dump_stack+0x1b2/0x281 [ 2117.980448] should_fail.cold+0x10a/0x149 [ 2117.984600] should_failslab+0xd6/0x130 [ 2117.988580] kmem_cache_alloc_node+0x263/0x410 [ 2117.993174] __alloc_skb+0x5c/0x510 [ 2117.996816] kobject_uevent_env+0x882/0xf30 [ 2118.001143] device_del+0x642/0xa80 [ 2118.004778] ? __device_links_no_driver+0x1b0/0x1b0 [ 2118.009798] device_unregister+0x22/0xc0 [ 2118.013864] bdi_unregister+0x42f/0x610 [ 2118.017855] ? wb_blkcg_offline+0x180/0x180 [ 2118.022191] del_gendisk+0x453/0x820 [ 2118.025914] ? disk_events_poll_msecs_store+0x150/0x150 [ 2118.031290] ? _raw_spin_unlock_irq+0x5a/0x80 [ 2118.035790] ? blk_cleanup_queue+0x43c/0x620 [ 2118.040206] loop_control_ioctl+0x347/0x3f0 [ 2118.044613] ? loop_lookup+0x190/0x190 [ 2118.048497] ? SyS_write+0x1b7/0x210 [ 2118.052216] ? loop_lookup+0x190/0x190 [ 2118.056107] do_vfs_ioctl+0x75a/0xff0 [ 2118.059921] ? lock_acquire+0x170/0x3f0 [ 2118.063922] ? ioctl_preallocate+0x1a0/0x1a0 [ 2118.068336] ? __fget+0x265/0x3e0 [ 2118.071796] ? do_vfs_ioctl+0xff0/0xff0 [ 2118.075779] ? security_file_ioctl+0x83/0xb0 [ 2118.080192] SyS_ioctl+0x7f/0xb0 [ 2118.083560] ? do_vfs_ioctl+0xff0/0xff0 [ 2118.087540] do_syscall_64+0x1d5/0x640 [ 2118.091432] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2118.096635] RIP: 0033:0x7f6b2ad1f209 [ 2118.100339] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2118.108050] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2118.115319] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2118.122587] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2118.129870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2118.137137] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 07:18:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200840) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) nanosleep(&(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200840) (async) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) (async) 07:18:51 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) syz_read_part_table(0x0, 0x6, &(0x7f0000001480)=[{&(0x7f00000000c0)="ce1162f81e1b7a4ecceacf30051f19b5301f33600e56161a88159822125d9a27d8b5ca42b57928a6419cc2297de8ed03c174c28c850161e99e22a85699c9b6ec50ab5103e92f153b7b839580b12ee9ba3ab1053efc3ddac4fab593cdf0d4bca13be78e60e01b09beefb239aae17fc1c9a6ad07c20ad5a4cc34a9c237fdb5623061112922ff46a04559092d52def25b1b2fba50dfc2ee48deffadd1cdf9b26613fed5d885655014e738457fb5918e929261de6ea6b576175079dd941abc2fe161e75ea6bc", 0xc4, 0x5}, {&(0x7f00000001c0)="9640f70624c29b4af614482c8f05325d3d12e91986bc7e481d03fe87b741b89028f3565e45f05c5d1758a1fa066e6c664a84261c2c1bc86c653b0ccdd2e5d02a0a3c38c99db16b0560943342e39dda299c417af90df9a65d8a8629c81b933752a4518c7fb8deee498c8a61890ff492dcef0fd7bf33b5f1b522311478e9e33e5662e60f6844f92a8ca0580bfb37a1d42a82eb1c4c83c3078e075ce2f372ebfed08894d625fc0e79697e51f2c5d747cf0a4f68cad85d4da7c54bc39feca263f706fe99", 0xc2, 0xd41}, {&(0x7f00000002c0)="94b3a5567ed08fbe49a6eaac5b4d3f42b3a0e8e9ee959443a6cc19e9d2a5cd3e7e507439394e00c3b46ad02154305c2ca51189f74d9792f5f492cc6b7f6158997f36d0fea080c09fc76e244a9901a3156726be2c", 0x54, 0x1f}, {&(0x7f0000000340)="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", 0x1000, 0xfffffffffffffb48}, {&(0x7f0000001340)="8b13739c7c0680606355f90568a1507d78b3a3ce6f9a142e6f54900f0374a9d31caaf66e25d0673b3ccfdb3f12b5a5bdbcaf47d2c9767cc0beecb6852cf8392a991752b9b97ff56ee36690e18d3617fe78b429f065f47c969edd3ab15ea3355d791ac3c11aff628697ada03e82e4d7c652055b7882470e3f71b559263c2c80301c3f25453a5d08870206c71a43772c81149225a430905fbd0453ba0b6218d3ede3ca0076a951e4fd6900dfafb2c9f274a8", 0xb1, 0x5}, {&(0x7f0000001400)="5e0cbc34d484b3fa8acd7f2bf1bd743f8582069c633d431228f7d6b8c20f5b4725c658ac13a5e5fa8b45e68e33bc45116f04e21e1d992aa206c1d37b41a491ac3023d3e6e04300b1d3f968b695c6d6", 0x4f, 0x9}]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) syz_read_part_table(0x0, 0x6, &(0x7f0000001480)=[{&(0x7f00000000c0)="ce1162f81e1b7a4ecceacf30051f19b5301f33600e56161a88159822125d9a27d8b5ca42b57928a6419cc2297de8ed03c174c28c850161e99e22a85699c9b6ec50ab5103e92f153b7b839580b12ee9ba3ab1053efc3ddac4fab593cdf0d4bca13be78e60e01b09beefb239aae17fc1c9a6ad07c20ad5a4cc34a9c237fdb5623061112922ff46a04559092d52def25b1b2fba50dfc2ee48deffadd1cdf9b26613fed5d885655014e738457fb5918e929261de6ea6b576175079dd941abc2fe161e75ea6bc", 0xc4, 0x5}, {&(0x7f00000001c0)="9640f70624c29b4af614482c8f05325d3d12e91986bc7e481d03fe87b741b89028f3565e45f05c5d1758a1fa066e6c664a84261c2c1bc86c653b0ccdd2e5d02a0a3c38c99db16b0560943342e39dda299c417af90df9a65d8a8629c81b933752a4518c7fb8deee498c8a61890ff492dcef0fd7bf33b5f1b522311478e9e33e5662e60f6844f92a8ca0580bfb37a1d42a82eb1c4c83c3078e075ce2f372ebfed08894d625fc0e79697e51f2c5d747cf0a4f68cad85d4da7c54bc39feca263f706fe99", 0xc2, 0xd41}, {&(0x7f00000002c0)="94b3a5567ed08fbe49a6eaac5b4d3f42b3a0e8e9ee959443a6cc19e9d2a5cd3e7e507439394e00c3b46ad02154305c2ca51189f74d9792f5f492cc6b7f6158997f36d0fea080c09fc76e244a9901a3156726be2c", 0x54, 0x1f}, {&(0x7f0000000340)="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", 0x1000, 0xfffffffffffffb48}, {&(0x7f0000001340)="8b13739c7c0680606355f90568a1507d78b3a3ce6f9a142e6f54900f0374a9d31caaf66e25d0673b3ccfdb3f12b5a5bdbcaf47d2c9767cc0beecb6852cf8392a991752b9b97ff56ee36690e18d3617fe78b429f065f47c969edd3ab15ea3355d791ac3c11aff628697ada03e82e4d7c652055b7882470e3f71b559263c2c80301c3f25453a5d08870206c71a43772c81149225a430905fbd0453ba0b6218d3ede3ca0076a951e4fd6900dfafb2c9f274a8", 0xb1, 0x5}, {&(0x7f0000001400)="5e0cbc34d484b3fa8acd7f2bf1bd743f8582069c633d431228f7d6b8c20f5b4725c658ac13a5e5fa8b45e68e33bc45116f04e21e1d992aa206c1d37b41a491ac3023d3e6e04300b1d3f968b695c6d6", 0x4f, 0x9}]) (async) 07:18:51 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (fail_nth: 12) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 2: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200840) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) 07:18:51 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)=""/138, 0x8a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:18:51 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:19:46 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) syz_read_part_table(0x0, 0x6, &(0x7f0000001480)=[{&(0x7f00000000c0)="ce1162f81e1b7a4ecceacf30051f19b5301f33600e56161a88159822125d9a27d8b5ca42b57928a6419cc2297de8ed03c174c28c850161e99e22a85699c9b6ec50ab5103e92f153b7b839580b12ee9ba3ab1053efc3ddac4fab593cdf0d4bca13be78e60e01b09beefb239aae17fc1c9a6ad07c20ad5a4cc34a9c237fdb5623061112922ff46a04559092d52def25b1b2fba50dfc2ee48deffadd1cdf9b26613fed5d885655014e738457fb5918e929261de6ea6b576175079dd941abc2fe161e75ea6bc", 0xc4, 0x5}, {&(0x7f00000001c0)="9640f70624c29b4af614482c8f05325d3d12e91986bc7e481d03fe87b741b89028f3565e45f05c5d1758a1fa066e6c664a84261c2c1bc86c653b0ccdd2e5d02a0a3c38c99db16b0560943342e39dda299c417af90df9a65d8a8629c81b933752a4518c7fb8deee498c8a61890ff492dcef0fd7bf33b5f1b522311478e9e33e5662e60f6844f92a8ca0580bfb37a1d42a82eb1c4c83c3078e075ce2f372ebfed08894d625fc0e79697e51f2c5d747cf0a4f68cad85d4da7c54bc39feca263f706fe99", 0xc2, 0xd41}, {&(0x7f00000002c0)="94b3a5567ed08fbe49a6eaac5b4d3f42b3a0e8e9ee959443a6cc19e9d2a5cd3e7e507439394e00c3b46ad02154305c2ca51189f74d9792f5f492cc6b7f6158997f36d0fea080c09fc76e244a9901a3156726be2c", 0x54, 0x1f}, {&(0x7f0000000340)="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", 0x1000, 0xfffffffffffffb48}, {&(0x7f0000001340)="8b13739c7c0680606355f90568a1507d78b3a3ce6f9a142e6f54900f0374a9d31caaf66e25d0673b3ccfdb3f12b5a5bdbcaf47d2c9767cc0beecb6852cf8392a991752b9b97ff56ee36690e18d3617fe78b429f065f47c969edd3ab15ea3355d791ac3c11aff628697ada03e82e4d7c652055b7882470e3f71b559263c2c80301c3f25453a5d08870206c71a43772c81149225a430905fbd0453ba0b6218d3ede3ca0076a951e4fd6900dfafb2c9f274a8", 0xb1, 0x5}, {&(0x7f0000001400)="5e0cbc34d484b3fa8acd7f2bf1bd743f8582069c633d431228f7d6b8c20f5b4725c658ac13a5e5fa8b45e68e33bc45116f04e21e1d992aa206c1d37b41a491ac3023d3e6e04300b1d3f968b695c6d6", 0x4f, 0x9}]) 07:19:46 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) 07:19:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0xa, 0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "91c5f7", 0xb6}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x400, 0x4) 07:19:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x109100, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x4f, [0x7f, 0x0, 0x800, 0xc0c, 0x2, 0xfffffffffffffe01], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/79}, &(0x7f00000002c0)=0x78) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 07:19:46 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f0000000480)="baf80c66b8f2233d8066efbafc0cedf30fc7b707006626c02ca9b8e1000f00d80f018c049a0f070fc76bf20f6e5d33baf80c66b8e9653a8d66efbafc0cb000ee66b9800000c00f326635000400000f30", 0x50}], 0x1, 0x1, &(0x7f0000000540)=[@cr4={0x1, 0x402c0}, @cstype3={0x5, 0xc}], 0x2) [ 2175.738194] IPVS: ftp: loaded support on port[0] = 21 [ 2175.788948] IPVS: ftp: loaded support on port[0] = 21 [ 2175.883415] chnl_net:caif_netlink_parms(): no params data found [ 2175.991973] chnl_net:caif_netlink_parms(): no params data found [ 2176.048054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.054684] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.061910] device bridge_slave_0 entered promiscuous mode [ 2176.069853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.077278] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.084495] device bridge_slave_1 entered promiscuous mode [ 2176.120346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2176.128078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.137309] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.144926] device bridge_slave_0 entered promiscuous mode [ 2176.152142] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2176.160047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.166775] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.174832] device bridge_slave_1 entered promiscuous mode [ 2176.206939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2176.214316] team0: Port device team_slave_0 added [ 2176.220513] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2176.228786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2176.237839] team0: Port device team_slave_1 added [ 2176.244259] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2176.267530] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2176.274904] team0: Port device team_slave_0 added [ 2176.287079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2176.294257] team0: Port device team_slave_1 added [ 2176.299777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2176.306180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.331882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2176.351938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2176.358241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.383781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2176.394930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2176.410809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2176.418413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2176.424798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.450477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2176.469287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2176.475911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.501298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2176.520814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2176.531805] device hsr_slave_0 entered promiscuous mode [ 2176.538080] device hsr_slave_1 entered promiscuous mode [ 2176.544308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2176.551249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2176.567050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2176.592912] device hsr_slave_0 entered promiscuous mode [ 2176.598934] device hsr_slave_1 entered promiscuous mode [ 2176.612124] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2176.619517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2176.750117] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.756618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.763444] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.769871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.799982] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.806525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.813106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.819551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.854832] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2176.860924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2176.874068] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2176.880807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.897893] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.904738] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.911504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.921964] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2176.933434] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2176.942463] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2176.948613] 8021q: adding VLAN 0 to HW filter on device team0 [ 2176.955454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2176.962301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2176.972461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2176.980638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2176.988914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2176.997067] bridge0: port 1(bridge_slave_0) entered blocking state [ 2177.003387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2177.013597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2177.021506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2177.029451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2177.037198] bridge0: port 2(bridge_slave_1) entered blocking state [ 2177.043610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2177.054065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2177.062144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2177.069630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2177.081139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2177.089852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2177.099910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2177.108281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2177.114553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2177.122268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2177.130067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2177.137876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2177.145119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2177.152045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2177.161468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2177.171165] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2177.177436] 8021q: adding VLAN 0 to HW filter on device team0 [ 2177.183789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2177.191419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2177.201765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2177.209346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2177.217168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2177.227287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2177.236124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2177.243006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2177.250962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2177.259591] bridge0: port 1(bridge_slave_0) entered blocking state [ 2177.265995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2177.272881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2177.280525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2177.290543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2177.301176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2177.309855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2177.317946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2177.324354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2177.332133] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2177.338401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2177.347410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2177.358132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2177.369665] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2177.376182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2177.385185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2177.394798] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2177.405552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2177.414783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2177.425909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2177.432934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2177.440404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2177.447247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2177.455356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2177.462842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2177.470884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2177.478870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2177.490120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2177.500041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2177.507851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2177.516441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2177.525087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2177.532529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2177.542510] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2177.548789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2177.564454] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2177.572269] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2177.578663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2177.585726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2177.599133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2177.624161] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2177.635353] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2177.642405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2177.652054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2177.690931] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2177.698620] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2177.706057] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2177.715762] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2177.724759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2177.732146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2177.741793] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2177.750317] device veth0_vlan entered promiscuous mode [ 2177.753891] Bluetooth: hci7 command 0x0409 tx timeout [ 2177.755773] Bluetooth: hci6 command 0x0409 tx timeout [ 2177.762628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2177.773319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2177.784835] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2177.794872] device veth1_vlan entered promiscuous mode [ 2177.800900] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2177.808951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2177.816911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2177.825317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2177.838219] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2177.852563] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2177.863964] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2177.870907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2177.878889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2177.887123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2177.900998] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2177.908456] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2177.915837] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2177.922893] device veth0_macvtap entered promiscuous mode [ 2177.933763] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2177.941770] device veth1_macvtap entered promiscuous mode [ 2177.948614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2177.956459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2177.964995] device veth0_vlan entered promiscuous mode [ 2177.971550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2177.979182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2177.987696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2178.000374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2178.008649] device veth1_vlan entered promiscuous mode [ 2178.016986] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2178.026445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.036656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.045822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.055810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.064977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.075340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.084785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.094677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.104025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.113785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.122878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.132634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.142571] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2178.149635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2178.158033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2178.165476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2178.173097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2178.182495] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2178.190930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.201396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.210576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.220543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.229701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.239583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.248838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.258599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.267768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.277595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.286809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.296789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.307106] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2178.314120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2178.322391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2178.330194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2178.338125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2178.357897] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2178.367794] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2178.375537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2178.383146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2178.392901] device veth0_macvtap entered promiscuous mode [ 2178.399629] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2178.408650] device veth1_macvtap entered promiscuous mode [ 2178.415494] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2178.429575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2178.439918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2178.452475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.462616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.471958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.482488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.491687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.501597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.510750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.520521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.529712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.539829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.549004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.558974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.568170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2178.577919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.588001] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2178.595094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2178.602642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2178.610404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2178.617604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2178.625448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2178.635612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.646221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.655750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.665665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.674855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.684698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.693975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.703874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.712976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.722769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.731974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.741884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.751260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2178.761037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.771323] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2178.778676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2178.786714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2178.799197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2179.833959] Bluetooth: hci7 command 0x041b tx timeout [ 2179.844649] Bluetooth: hci6 command 0x041b tx timeout [ 2181.912996] Bluetooth: hci6 command 0x040f tx timeout [ 2181.913115] Bluetooth: hci7 command 0x040f tx timeout [ 2183.993016] Bluetooth: hci7 command 0x0419 tx timeout [ 2183.998386] Bluetooth: hci6 command 0x0419 tx timeout [ 2291.430640] INFO: task syz-executor.2:8011 blocked for more than 140 seconds. [ 2291.437929] Not tainted 4.14.289-syzkaller #0 [ 2291.444007] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2291.453364] syz-executor.2 D25632 8011 1 0x00000004 [ 2291.459137] Call Trace: [ 2291.462340] __schedule+0x88b/0x1de0 [ 2291.466043] ? __lock_acquire+0x5fc/0x3f20 [ 2291.471112] ? io_schedule_timeout+0x140/0x140 [ 2291.475692] ? lock_downgrade+0x740/0x740 [ 2291.480561] schedule+0x8d/0x1b0 [ 2291.483938] schedule_preempt_disabled+0xf/0x20 [ 2291.488595] __mutex_lock+0x669/0x1310 [ 2291.493712] ? __blkdev_get+0x191/0x1090 [ 2291.497778] ? __mutex_lock+0x350/0x1310 [ 2291.502496] ? lo_open+0x19/0xb0 [ 2291.505868] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2291.512193] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2291.517642] ? disk_get_part+0x95/0x140 [ 2291.522389] ? loop_unregister_transfer+0x90/0x90 [ 2291.527235] lo_open+0x19/0xb0 [ 2291.531313] __blkdev_get+0x306/0x1090 [ 2291.535203] ? lookup_fast+0x430/0xe30 [ 2291.539071] ? sb_min_blocksize+0x1d0/0x1d0 [ 2291.544495] ? fsnotify+0x974/0x11b0 [ 2291.548204] blkdev_get+0x88/0x890 [ 2291.552584] ? __blkdev_get+0x1090/0x1090 [ 2291.556735] ? lock_downgrade+0x740/0x740 [ 2291.561523] ? do_raw_spin_unlock+0x164/0x220 [ 2291.566116] ? _raw_spin_unlock+0x29/0x40 [ 2291.571292] blkdev_open+0x1cc/0x250 [ 2291.575011] ? security_file_open+0x82/0x190 [ 2291.579791] do_dentry_open+0x44b/0xec0 [ 2291.583771] ? blkdev_get_by_dev+0x70/0x70 [ 2291.587984] vfs_open+0x105/0x220 [ 2291.591603] path_openat+0x628/0x2970 [ 2291.595409] ? path_lookupat+0x780/0x780 [ 2291.599509] ? trace_hardirqs_on+0x10/0x10 [ 2291.603731] ? trace_hardirqs_on+0x10/0x10 [ 2291.607941] do_filp_open+0x179/0x3c0 [ 2291.611793] ? may_open_dev+0xe0/0xe0 [ 2291.615583] ? lock_downgrade+0x740/0x740 [ 2291.619797] ? do_raw_spin_unlock+0x164/0x220 [ 2291.624290] ? _raw_spin_unlock+0x29/0x40 [ 2291.628544] ? __alloc_fd+0x1be/0x490 [ 2291.632421] ? dput.part.0+0x27/0x710 [ 2291.636213] do_sys_open+0x296/0x410 [ 2291.639969] ? filp_open+0x60/0x60 [ 2291.643501] ? do_syscall_64+0x4c/0x640 [ 2291.647462] ? SyS_open+0x30/0x30 [ 2291.650980] do_syscall_64+0x1d5/0x640 [ 2291.654864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2291.660103] RIP: 0033:0x7f1acac6a124 [ 2291.663802] RSP: 002b:00007fffd2199540 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2291.671760] RAX: ffffffffffffffda RBX: 00007fffd2199640 RCX: 00007f1acac6a124 [ 2291.679015] RDX: 0000000000000002 RSI: 00007fffd2199680 RDI: 00000000ffffff9c [ 2291.686318] RBP: 00007fffd2199680 R08: 0000000000000000 R09: 00007fffd2199450 [ 2291.693647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2291.700952] R13: 00000000002053bc R14: 0000000000000005 R15: 00007fffd2199680 [ 2291.708242] INFO: task syz-executor.4:8014 blocked for more than 140 seconds. [ 2291.715599] Not tainted 4.14.289-syzkaller #0 [ 2291.720647] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2291.728598] syz-executor.4 D25336 8014 1 0x00000004 [ 2291.734274] Call Trace: [ 2291.736855] __schedule+0x88b/0x1de0 [ 2291.740721] ? __lock_acquire+0x5fc/0x3f20 [ 2291.744952] ? io_schedule_timeout+0x140/0x140 [ 2291.749613] ? lock_downgrade+0x740/0x740 [ 2291.753772] schedule+0x8d/0x1b0 [ 2291.757126] schedule_preempt_disabled+0xf/0x20 [ 2291.761830] __mutex_lock+0x669/0x1310 [ 2291.765714] ? __blkdev_get+0x191/0x1090 [ 2291.769812] ? __mutex_lock+0x350/0x1310 [ 2291.773861] ? lo_open+0x19/0xb0 [ 2291.777204] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2291.782717] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2291.788151] ? disk_get_part+0x95/0x140 [ 2291.792172] ? loop_unregister_transfer+0x90/0x90 [ 2291.797002] lo_open+0x19/0xb0 [ 2291.800248] __blkdev_get+0x306/0x1090 [ 2291.804127] ? lookup_fast+0x430/0xe30 [ 2291.807990] ? sb_min_blocksize+0x1d0/0x1d0 [ 2291.812371] ? fsnotify+0x974/0x11b0 [ 2291.816092] blkdev_get+0x88/0x890 [ 2291.820096] ? __blkdev_get+0x1090/0x1090 [ 2291.824247] ? lock_downgrade+0x740/0x740 [ 2291.828376] ? do_raw_spin_unlock+0x164/0x220 [ 2291.832981] ? _raw_spin_unlock+0x29/0x40 [ 2291.837123] blkdev_open+0x1cc/0x250 [ 2291.840867] ? security_file_open+0x82/0x190 [ 2291.845268] do_dentry_open+0x44b/0xec0 [ 2291.849236] ? blkdev_get_by_dev+0x70/0x70 [ 2291.853524] vfs_open+0x105/0x220 [ 2291.856976] path_openat+0x628/0x2970 [ 2291.860837] ? path_lookupat+0x780/0x780 [ 2291.865078] ? trace_hardirqs_on+0x10/0x10 [ 2291.869380] ? trace_hardirqs_on+0x10/0x10 [ 2291.873620] do_filp_open+0x179/0x3c0 [ 2291.877404] ? may_open_dev+0xe0/0xe0 [ 2291.881387] ? lock_downgrade+0x740/0x740 [ 2291.886504] ? do_raw_spin_unlock+0x164/0x220 [ 2291.891041] ? _raw_spin_unlock+0x29/0x40 [ 2291.895179] ? __alloc_fd+0x1be/0x490 [ 2291.899081] ? dput.part.0+0x27/0x710 [ 2291.902976] do_sys_open+0x296/0x410 [ 2291.906709] ? filp_open+0x60/0x60 [ 2291.910317] ? do_syscall_64+0x4c/0x640 [ 2291.914277] ? SyS_open+0x30/0x30 [ 2291.917727] do_syscall_64+0x1d5/0x640 [ 2291.921677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2291.926850] RIP: 0033:0x7f78d71ba124 [ 2291.930616] RSP: 002b:00007ffcc37b3420 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2291.938486] RAX: ffffffffffffffda RBX: 00007ffcc37b3520 RCX: 00007f78d71ba124 [ 2291.945809] RDX: 0000000000000002 RSI: 00007ffcc37b3560 RDI: 00000000ffffff9c [ 2291.953138] RBP: 00007ffcc37b3560 R08: 0000000000000000 R09: 00007ffcc37b3330 [ 2291.960449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2291.967706] R13: 00000000002053b5 R14: 0000000000000008 R15: 00007ffcc37b3560 [ 2291.975080] INFO: task systemd-udevd:5098 blocked for more than 140 seconds. [ 2291.982320] Not tainted 4.14.289-syzkaller #0 [ 2291.987319] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2291.995338] systemd-udevd D27808 5098 4627 0x00000300 [ 2292.001017] Call Trace: [ 2292.003598] __schedule+0x88b/0x1de0 [ 2292.007292] ? io_schedule_timeout+0x140/0x140 [ 2292.011932] ? lock_downgrade+0x740/0x740 [ 2292.016147] schedule+0x8d/0x1b0 [ 2292.019576] schedule_preempt_disabled+0xf/0x20 [ 2292.024299] __mutex_lock+0x669/0x1310 [ 2292.028172] ? kernel_text_address+0xbd/0xf0 [ 2292.032637] ? __blkdev_get+0x191/0x1090 [ 2292.036691] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2292.042189] ? exact_match+0x9/0x20 [ 2292.045807] ? disk_block_events+0x1d/0x120 [ 2292.050200] __blkdev_get+0x191/0x1090 [ 2292.054089] ? lookup_fast+0x430/0xe30 [ 2292.057970] ? sb_min_blocksize+0x1d0/0x1d0 [ 2292.062359] ? fsnotify+0x974/0x11b0 [ 2292.066061] blkdev_get+0x88/0x890 [ 2292.069749] ? __blkdev_get+0x1090/0x1090 [ 2292.073886] ? lock_downgrade+0x740/0x740 [ 2292.078011] ? do_raw_spin_unlock+0x164/0x220 [ 2292.082559] ? _raw_spin_unlock+0x29/0x40 [ 2292.086696] blkdev_open+0x1cc/0x250 [ 2292.090597] ? security_file_open+0x82/0x190 [ 2292.094995] do_dentry_open+0x44b/0xec0 [ 2292.098946] ? blkdev_get_by_dev+0x70/0x70 [ 2292.103227] vfs_open+0x105/0x220 [ 2292.106697] path_openat+0x628/0x2970 [ 2292.110555] ? path_lookupat+0x780/0x780 [ 2292.114690] ? trace_hardirqs_on+0x10/0x10 [ 2292.118900] ? copyout+0xc0/0xc0 [ 2292.122322] do_filp_open+0x179/0x3c0 [ 2292.126209] ? may_open_dev+0xe0/0xe0 [ 2292.130083] ? lock_downgrade+0x740/0x740 [ 2292.134236] ? do_raw_spin_unlock+0x164/0x220 [ 2292.138708] ? _raw_spin_unlock+0x29/0x40 [ 2292.143049] ? __alloc_fd+0x1be/0x490 [ 2292.146849] do_sys_open+0x296/0x410 [ 2292.150660] ? filp_open+0x60/0x60 [ 2292.154190] ? do_syscall_64+0x4c/0x640 [ 2292.158142] ? do_sys_open+0x410/0x410 [ 2292.162109] do_syscall_64+0x1d5/0x640 [ 2292.166004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2292.171242] RIP: 0033:0x7fcc71b14840 [ 2292.174936] RSP: 002b:00007ffe5aa18a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2292.182684] RAX: ffffffffffffffda RBX: 000056471c14b580 RCX: 00007fcc71b14840 [ 2292.190020] RDX: 000056471a545fe3 RSI: 00000000000a0800 RDI: 000056471c166ef0 [ 2292.197275] RBP: 00007ffe5aa18bc0 R08: 000056471a545670 R09: 0000000000000010 [ 2292.204573] R10: 000056471a545d0c R11: 0000000000000246 R12: 00007ffe5aa18b10 [ 2292.211904] R13: 000056471c15eab0 R14: 0000000000000003 R15: 000000000000000e [ 2292.219422] INFO: task systemd-udevd:11933 blocked for more than 140 seconds. [ 2292.226686] Not tainted 4.14.289-syzkaller #0 [ 2292.231755] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.239768] systemd-udevd D28344 11933 4627 0x00000300 [ 2292.245386] Call Trace: [ 2292.247956] __schedule+0x88b/0x1de0 [ 2292.251745] ? io_schedule_timeout+0x140/0x140 [ 2292.256320] ? lock_downgrade+0x740/0x740 [ 2292.260505] schedule+0x8d/0x1b0 [ 2292.263863] schedule_preempt_disabled+0xf/0x20 [ 2292.268525] __mutex_lock+0x669/0x1310 [ 2292.272456] ? __blkdev_get+0x191/0x1090 [ 2292.276506] ? __mutex_lock+0x350/0x1310 [ 2292.280617] ? lo_open+0x19/0xb0 [ 2292.283973] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2292.289470] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2292.294909] ? exact_match+0x9/0x20 [ 2292.298515] ? kobj_lookup+0x31e/0x400 [ 2292.302614] lo_open+0x19/0xb0 [ 2292.305793] ? loop_unregister_transfer+0x90/0x90 [ 2292.310680] __blkdev_get+0xa8c/0x1090 [ 2292.314558] ? lookup_fast+0x430/0xe30 [ 2292.318456] ? sb_min_blocksize+0x1d0/0x1d0 [ 2292.322833] ? fsnotify+0x974/0x11b0 [ 2292.326539] blkdev_get+0x88/0x890 [ 2292.330116] ? __blkdev_get+0x1090/0x1090 [ 2292.334249] ? lock_downgrade+0x740/0x740 [ 2292.338370] ? do_raw_spin_unlock+0x164/0x220 [ 2292.342914] ? _raw_spin_unlock+0x29/0x40 [ 2292.347047] blkdev_open+0x1cc/0x250 [ 2292.350806] ? security_file_open+0x82/0x190 [ 2292.355224] do_dentry_open+0x44b/0xec0 [ 2292.359173] ? blkdev_get_by_dev+0x70/0x70 [ 2292.363457] ? __inode_permission+0xcd/0x2f0 [ 2292.367853] vfs_open+0x105/0x220 [ 2292.371358] path_openat+0x628/0x2970 [ 2292.375153] ? path_lookupat+0x780/0x780 [ 2292.379189] ? trace_hardirqs_on+0x10/0x10 [ 2292.383473] ? copyout+0xc0/0xc0 [ 2292.386828] do_filp_open+0x179/0x3c0 [ 2292.390699] ? may_open_dev+0xe0/0xe0 [ 2292.394493] ? lock_downgrade+0x740/0x740 [ 2292.398618] ? do_raw_spin_unlock+0x164/0x220 [ 2292.403153] ? _raw_spin_unlock+0x29/0x40 [ 2292.407295] ? __alloc_fd+0x1be/0x490 [ 2292.411140] do_sys_open+0x296/0x410 [ 2292.414842] ? filp_open+0x60/0x60 [ 2292.418377] ? do_syscall_64+0x4c/0x640 [ 2292.422492] ? do_sys_open+0x410/0x410 [ 2292.426382] do_syscall_64+0x1d5/0x640 [ 2292.430319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2292.435495] RIP: 0033:0x7fcc71b14840 [ 2292.439189] RSP: 002b:00007ffe5aa18a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2292.446940] RAX: ffffffffffffffda RBX: 000056471c15e140 RCX: 00007fcc71b14840 [ 2292.454256] RDX: 000056471a545fe3 RSI: 00000000000a0800 RDI: 000056471c161890 [ 2292.461624] RBP: 00007ffe5aa18bc0 R08: 000056471a545670 R09: 0000000000000010 [ 2292.468886] R10: 000056471a545d0c R11: 0000000000000246 R12: 00007ffe5aa18b10 [ 2292.476641] R13: 000056471c159880 R14: 0000000000000003 R15: 000000000000000e [ 2292.484002] INFO: task syz-executor.0:15032 blocked for more than 140 seconds. [ 2292.492522] Not tainted 4.14.289-syzkaller #0 [ 2292.497611] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.505625] syz-executor.0 D29088 15032 8007 0x00000004 [ 2292.511474] Call Trace: [ 2292.514052] __schedule+0x88b/0x1de0 [ 2292.517753] ? io_schedule_timeout+0x140/0x140 [ 2292.522374] ? lock_downgrade+0x740/0x740 [ 2292.526545] schedule+0x8d/0x1b0 [ 2292.529967] schedule_preempt_disabled+0xf/0x20 [ 2292.534621] __mutex_lock+0x669/0x1310 [ 2292.538490] ? blkdev_reread_part+0x1b/0x40 [ 2292.542840] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2292.548278] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2292.553423] ? __wake_up_common+0x5d0/0x5d0 [ 2292.557833] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 2292.562999] blkdev_reread_part+0x1b/0x40 [ 2292.567137] loop_set_status+0xeeb/0x12b0 [ 2292.571319] loop_set_status64+0x92/0xe0 [ 2292.575372] ? loop_set_status_old+0x200/0x200 [ 2292.580007] ? __mutex_lock+0x360/0x1310 [ 2292.584067] ? wait_for_completion_io+0x10/0x10 [ 2292.588793] lo_ioctl+0x587/0x1cd0 [ 2292.592430] ? loop_set_status64+0xe0/0xe0 [ 2292.596669] blkdev_ioctl+0x540/0x1830 [ 2292.600605] ? blkpg_ioctl+0x8d0/0x8d0 [ 2292.604493] ? trace_hardirqs_on+0x10/0x10 [ 2292.608717] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2292.613884] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2292.618900] block_ioctl+0xd9/0x120 [ 2292.622613] ? blkdev_fallocate+0x3a0/0x3a0 [ 2292.628767] do_vfs_ioctl+0x75a/0xff0 [ 2292.632647] ? lock_acquire+0x170/0x3f0 [ 2292.636617] ? ioctl_preallocate+0x1a0/0x1a0 [ 2292.641111] ? __fget+0x265/0x3e0 [ 2292.644643] ? do_vfs_ioctl+0xff0/0xff0 [ 2292.648688] ? security_file_ioctl+0x83/0xb0 [ 2292.653158] SyS_ioctl+0x7f/0xb0 [ 2292.656519] ? do_vfs_ioctl+0xff0/0xff0 [ 2292.660645] do_syscall_64+0x1d5/0x640 [ 2292.664538] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2292.669884] RIP: 0033:0x7f2da4cbcfc7 [ 2292.673583] RSP: 002b:00007f2da3631ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 2292.681346] RAX: ffffffffffffffda RBX: 00007f2da3631f20 RCX: 00007f2da4cbcfc7 [ 2292.688622] RDX: 00007f2da3632030 RSI: 0000000000004c04 RDI: 0000000000000004 [ 2292.696077] RBP: 00007f2da4d17161 R08: 0000000000000000 R09: 0000000000000000 [ 2292.703402] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f2da3632030 [ 2292.710750] R13: 00007ffd3eb1ffdf R14: 00007f2da3632300 R15: 0000000000022000 [ 2292.718040] INFO: task syz-executor.0:15057 blocked for more than 140 seconds. [ 2292.725639] Not tainted 4.14.289-syzkaller #0 [ 2292.730728] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.738687] syz-executor.0 D29088 15057 8007 0x00000004 [ 2292.744356] Call Trace: [ 2292.746963] __schedule+0x88b/0x1de0 [ 2292.751256] ? io_schedule_timeout+0x140/0x140 [ 2292.755847] ? lock_downgrade+0x740/0x740 [ 2292.760056] schedule+0x8d/0x1b0 [ 2292.763425] schedule_preempt_disabled+0xf/0x20 [ 2292.768080] __mutex_lock+0x669/0x1310 [ 2292.772175] ? kernel_text_address+0xbd/0xf0 [ 2292.776588] ? __blkdev_get+0x191/0x1090 [ 2292.780805] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2292.786250] ? exact_match+0x9/0x20 [ 2292.789941] ? disk_block_events+0x1d/0x120 [ 2292.794261] __blkdev_get+0x191/0x1090 [ 2292.798156] ? lookup_fast+0x430/0xe30 [ 2292.802095] ? sb_min_blocksize+0x1d0/0x1d0 [ 2292.806497] ? fsnotify+0x974/0x11b0 [ 2292.810540] blkdev_get+0x88/0x890 [ 2292.814067] ? __blkdev_get+0x1090/0x1090 [ 2292.818192] ? lock_downgrade+0x740/0x740 [ 2292.822417] ? do_raw_spin_unlock+0x164/0x220 [ 2292.826900] ? _raw_spin_unlock+0x29/0x40 [ 2292.831092] blkdev_open+0x1cc/0x250 [ 2292.834792] ? security_file_open+0x82/0x190 [ 2292.839245] do_dentry_open+0x44b/0xec0 [ 2292.843217] ? blkdev_get_by_dev+0x70/0x70 [ 2292.847437] ? __inode_permission+0xcd/0x2f0 [ 2292.851884] vfs_open+0x105/0x220 [ 2292.855328] path_openat+0x628/0x2970 [ 2292.859106] ? path_lookupat+0x780/0x780 [ 2292.863208] ? trace_hardirqs_on+0x10/0x10 [ 2292.867436] do_filp_open+0x179/0x3c0 [ 2292.871307] ? may_open_dev+0xe0/0xe0 [ 2292.875103] ? lock_downgrade+0x740/0x740 [ 2292.879294] ? do_raw_spin_unlock+0x164/0x220 [ 2292.883778] ? _raw_spin_unlock+0x29/0x40 [ 2292.887899] ? __alloc_fd+0x1be/0x490 [ 2292.891743] do_sys_open+0x296/0x410 [ 2292.895446] ? filp_open+0x60/0x60 [ 2292.898963] ? SyS_pwrite64+0xca/0x140 [ 2292.902885] ? do_syscall_64+0x4c/0x640 [ 2292.906847] ? SyS_open+0x30/0x30 [ 2292.910354] do_syscall_64+0x1d5/0x640 [ 2292.914246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2292.919484] RIP: 0033:0x7f2da4c70124 [ 2292.923180] RSP: 002b:00007f2da35efe00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2292.931068] RAX: ffffffffffffffda RBX: 00007f2da4d06a20 RCX: 00007f2da4c70124 [ 2292.938325] RDX: 0000000000000002 RSI: 00007f2da35eff20 RDI: 00000000ffffff9c [ 2292.945625] RBP: 00007f2da35eff20 R08: 0000000000000000 R09: 0000000000000000 [ 2292.952984] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2292.960280] R13: 0000000000000005 R14: 0000000020001510 R15: 0000000000000006 [ 2292.967566] INFO: task syz-executor.5:15030 blocked for more than 140 seconds. [ 2292.974974] Not tainted 4.14.289-syzkaller #0 [ 2292.980039] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.987988] syz-executor.5 D28536 15030 8008 0x00000004 [ 2292.993652] Call Trace: [ 2292.996229] __schedule+0x88b/0x1de0 [ 2292.999978] ? io_schedule_timeout+0x140/0x140 [ 2293.004573] ? lock_downgrade+0x740/0x740 [ 2293.008703] schedule+0x8d/0x1b0 [ 2293.012132] schedule_preempt_disabled+0xf/0x20 [ 2293.016787] __mutex_lock+0x669/0x1310 [ 2293.020712] ? loop_control_ioctl+0x181/0x3f0 [ 2293.025196] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2293.030715] ? loop_queue_work+0x21e0/0x21e0 [ 2293.035114] loop_control_ioctl+0x181/0x3f0 [ 2293.039496] ? loop_lookup+0x190/0x190 [ 2293.043367] ? SyS_write+0x1b7/0x210 [ 2293.047056] ? loop_lookup+0x190/0x190 [ 2293.050974] do_vfs_ioctl+0x75a/0xff0 [ 2293.054764] ? lock_acquire+0x170/0x3f0 [ 2293.058713] ? ioctl_preallocate+0x1a0/0x1a0 [ 2293.063152] ? __fget+0x265/0x3e0 [ 2293.066594] ? do_vfs_ioctl+0xff0/0xff0 [ 2293.070624] ? security_file_ioctl+0x83/0xb0 [ 2293.075017] SyS_ioctl+0x7f/0xb0 [ 2293.078358] ? do_vfs_ioctl+0xff0/0xff0 [ 2293.082368] do_syscall_64+0x1d5/0x640 [ 2293.086247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2293.091496] RIP: 0033:0x7f6b2ad1f209 [ 2293.095197] RSP: 002b:00007f6b29694168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2293.102952] RAX: ffffffffffffffda RBX: 00007f6b2ae31f60 RCX: 00007f6b2ad1f209 [ 2293.110294] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 2293.117551] RBP: 00007f6b296941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.124843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2293.132172] R13: 00007ffd03e9ac0f R14: 00007f6b29694300 R15: 0000000000022000 [ 2293.139635] [ 2293.139635] Showing all locks held in the system: [ 2293.145942] 1 lock held by khungtaskd/1534: [ 2293.150402] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 2293.159526] 1 lock held by in:imklog/7702: [ 2293.163746] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x1fb/0x2b0 [ 2293.172234] 2 locks held by syz-executor.2/8011: [ 2293.176990] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.185749] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 2293.193934] 2 locks held by syz-executor.4/8014: [ 2293.198692] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.207425] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 2293.215597] 1 lock held by systemd-udevd/5098: [ 2293.220237] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.228912] 2 locks held by systemd-udevd/11933: [ 2293.233714] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.242445] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 2293.250571] 2 locks held by syz-executor.0/15032: [ 2293.255395] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [] lo_ioctl+0x87/0x1cd0 [ 2293.264050] #1: (&bdev->bd_mutex){+.+.}, at: [] blkdev_reread_part+0x1b/0x40 [ 2293.273083] 1 lock held by syz-executor.0/15057: [ 2293.277833] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.286555] 2 locks held by syz-executor.5/15030: [ 2293.291463] #0: (loop_index_mutex){+.+.}, at: [] loop_control_ioctl+0x67/0x3f0 [ 2293.300626] #1: (&lo->lo_ctl_mutex){+.+.}, at: [] loop_control_ioctl+0x181/0x3f0 [ 2293.309986] 2 locks held by syz-executor.5/15089: [ 2293.314805] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.323541] #1: (loop_index_mutex){+.+.}, at: [] lo_open+0x19/0xb0 [ 2293.331681] 1 lock held by syz-executor.0/15090: [ 2293.336417] #0: (&bdev->bd_mutex){+.+.}, at: [] __blkdev_get+0x191/0x1090 [ 2293.345139] [ 2293.346750] ============================================= [ 2293.346750] [ 2293.354184] NMI backtrace for cpu 1 [ 2293.357801] CPU: 1 PID: 1534 Comm: khungtaskd Not tainted 4.14.289-syzkaller #0 [ 2293.365221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2293.374547] Call Trace: [ 2293.377110] dump_stack+0x1b2/0x281 [ 2293.380716] nmi_cpu_backtrace.cold+0x57/0x93 [ 2293.385189] ? irq_force_complete_move+0x350/0x350 [ 2293.390091] nmi_trigger_cpumask_backtrace+0x13a/0x180 [ 2293.395344] watchdog+0x5b9/0xb40 [ 2293.398771] ? hungtask_pm_notify+0x50/0x50 [ 2293.403063] kthread+0x30d/0x420 [ 2293.406407] ? kthread_create_on_node+0xd0/0xd0 [ 2293.411053] ret_from_fork+0x24/0x30 [ 2293.414853] Sending NMI from CPU 1 to CPUs 0: [ 2293.419805] NMI backtrace for cpu 0 [ 2293.419810] CPU: 0 PID: 7708 Comm: rs:main Q:Reg Not tainted 4.14.289-syzkaller #0 [ 2293.419814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2293.419817] task: ffff8880a1afa280 task.stack: ffff88809fd08000 [ 2293.419820] RIP: 0010:trace_hardirqs_on_caller+0x33e/0x580 [ 2293.419823] RSP: 0018:ffff88809fd0f718 EFLAGS: 00000806 [ 2293.419828] RAX: dffffc0000000000 RBX: ffff8880a1afa280 RCX: 1ffff1101435f56f [ 2293.419832] RDX: 1ffff1101435f559 RSI: ffff8880a1afab58 RDI: ffff8880a1afaac8 [ 2293.419835] RBP: 0000000000087e31 R08: 0000000000000222 R09: 0000000000000000 [ 2293.419839] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880976bb5e8 [ 2293.419842] R13: ffffffff88f09a18 R14: 0000000000000383 R15: ffff8880976bb5e8 [ 2293.419846] FS: 00007f655a4f2700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 2293.419849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2293.419853] CR2: 00007f948c6af018 CR3: 00000000ab68d000 CR4: 00000000003406f0 [ 2293.419856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2293.419860] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2293.419862] Call Trace: [ 2293.419864] __find_get_block+0x1d8/0xc40 [ 2293.419866] __getblk_gfp+0x28/0x70 [ 2293.419869] __ext4_get_inode_loc+0x32b/0xf30 [ 2293.419872] ext4_reserve_inode_write+0xd9/0x230 [ 2293.419874] ? ext4_dirty_inode+0x6c/0x90 [ 2293.419876] ext4_mark_inode_dirty+0x12f/0x7a0 [ 2293.419879] ? ext4_expand_extra_isize+0x460/0x460 [ 2293.419882] ? ext4_journal_check_start+0x13d/0x1e0 [ 2293.419884] ? ext4_get_nojournal+0x46/0xa0 [ 2293.419887] ? __ext4_journal_start_sb+0x105/0x3b0 [ 2293.419889] ? ext4_dirty_inode+0x51/0x90 [ 2293.419892] ext4_dirty_inode+0x6c/0x90 [ 2293.419900] ? ext4_setattr+0x22f0/0x22f0 [ 2293.419902] __mark_inode_dirty+0x11e/0xf40 [ 2293.419904] ? block_write_end+0x42/0xf0 [ 2293.419907] generic_write_end+0x25e/0x360 [ 2293.419909] ext4_da_write_end+0x50c/0x8e0 [ 2293.419912] generic_perform_write+0x268/0x420 [ 2293.419914] ? __mnt_drop_write_file+0x5f/0x90 [ 2293.419917] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 2293.419919] ? current_time+0xb0/0xb0 [ 2293.419922] ? ext4_file_write_iter+0x1cc/0xd20 [ 2293.419924] __generic_file_write_iter+0x227/0x590 [ 2293.419927] ext4_file_write_iter+0x276/0xd20 [ 2293.419929] ? aa_file_perm+0x304/0xab0 [ 2293.419932] ? ext4_file_read_iter+0x330/0x330 [ 2293.419934] ? trace_hardirqs_on+0x10/0x10 [ 2293.419936] ? iov_iter_init+0xa6/0x1c0 [ 2293.419938] __vfs_write+0x44c/0x630 [ 2293.419941] ? kernel_read+0x110/0x110 [ 2293.419944] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2293.419946] vfs_write+0x17f/0x4d0 [ 2293.419948] SyS_write+0xf2/0x210 [ 2293.419950] ? SyS_read+0x210/0x210 [ 2293.419952] ? __do_page_fault+0x159/0xad0 [ 2293.419955] ? do_syscall_64+0x4c/0x640 [ 2293.419957] ? SyS_read+0x210/0x210 [ 2293.419959] do_syscall_64+0x1d5/0x640 [ 2293.419962] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2293.419964] RIP: 0033:0x7f655cf361cd [ 2293.419967] RSP: 002b:00007f655a4f1590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2293.419973] RAX: ffffffffffffffda RBX: 00007f6550024f20 RCX: 00007f655cf361cd [ 2293.419976] RDX: 00000000000004a6 RSI: 00007f6550024f20 RDI: 0000000000000007 [ 2293.419980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2293.419984] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f6550024ca0 [ 2293.419987] R13: 00007f655a4f15b0 R14: 00005635bdc20440 R15: 00000000000004a6 [ 2293.419988] Code: 53 01 00 00 8b 83 30 08 00 00 48 8d bb 48 08 00 00 48 89 fa 48 c1 ea 03 8d 68 01 48 b8 00 00 00 00 00 fc ff df 89 ab 30 08 00 00 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 26 01 00 00 89 ab 48 08 00 [ 2293.420380] Kernel panic - not syncing: hung_task: blocked tasks [ 2293.772854] CPU: 1 PID: 1534 Comm: khungtaskd Not tainted 4.14.289-syzkaller #0 [ 2293.780360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 2293.789695] Call Trace: [ 2293.792262] dump_stack+0x1b2/0x281 [ 2293.795882] panic+0x1f9/0x42d [ 2293.799073] ? add_taint.cold+0x16/0x16 [ 2293.803039] ? printk_safe_flush+0xa9/0x110 [ 2293.807348] watchdog+0x5ca/0xb40 [ 2293.810793] ? hungtask_pm_notify+0x50/0x50 [ 2293.815105] kthread+0x30d/0x420 [ 2293.818489] ? kthread_create_on_node+0xd0/0xd0 [ 2293.823140] ret_from_fork+0x24/0x30 [ 2293.827122] Kernel Offset: disabled [ 2293.830737] Rebooting in 86400 seconds..