M_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:16 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket(0xa, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000001c0)=0xc) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000340)="3836d88c93e25ed21562a05d3984613d2172f8bb60557d3e868948c4356ac2a212047359fb350ed44e9a70d28f564b561d0ec425b8832f610ea294db5b1710066704cfeaea419a9b078cbb1117cea07863e850ed345eabb7f8dff39be69b924c2a5a80b74620e422f2eff6160ebbfa84dfc3dcce559bee6672ee951998583ed78e1a55a492fed46753b3d855e9ac04db87862c49aabcce30a02c", 0x1}], 0x6) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000180)={'vxcan1\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x400, r6, &(0x7f0000000000)="82a8339b540fae127fbe44fcc95bd03ae9a740efcc61965f37fdb34b4f2c78c70b4cc7861dfb50e45c58e1cbb16e4769581855ae4809925b298e3f3ca6516a29b9ac5e68e660d75a40fb27a81dcd84ceba34c3afe02096901c05e66fec85e41d1cb0b3546a074a0e041099ffa37cc801c11e5bf60f343656b1afb83a45211924651bc33bb3926ac43ae98bbbd6937105bac813bb078e3ebf5e5e02e0fb2db86c3e98726bcffd157ffc56", 0xaa, 0xffff, 0x0, 0x2, r8}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)) [ 1070.729844] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1070.729859] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1070.729884] reason=80000021 qualification=0000000000000000 [ 1070.729898] IDTVectoring: info=00000000 errcode=00000000 [ 1070.729923] TSC Offset = 0xfffffdbff531405e [ 1070.729959] EPT pointer = 0x000000009473d01e [ 1070.730003] Virtual processor ID = 0x0003 [ 1070.854547] *** Guest State *** [ 1070.854600] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1070.854650] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1070.854669] CR3 = 0x00000000fffbc000 [ 1070.854697] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1070.854717] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1070.854777] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1070.854799] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1070.854899] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.854999] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.855178] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.855237] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.855336] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.855388] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1070.855477] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1070.855536] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1070.855618] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1070.855675] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1070.855715] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1070.855736] Interruptibility = 00000000 ActivityState = 00000000 [ 1070.855753] *** Host State *** [ 1070.855816] RIP = 0xffffffff8116426f RSP = 0xffff88805dc079d0 [ 1070.855885] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1070.855906] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1070.855948] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1070.855997] CR0=0000000080050033 CR3=0000000097256000 CR4=00000000001426e0 [ 1070.856055] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1070.856094] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1070.856107] *** Control State *** [ 1070.856116] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1070.856133] EntryControls=0000d1ff ExitControls=002fefff [ 1070.857380] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1070.857396] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1070.857462] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1070.857481] reason=80000021 qualification=0000000000000000 [ 1070.857499] IDTVectoring: info=00000000 errcode=00000000 [ 1070.857566] TSC Offset = 0xfffffdbfe26d332c [ 1070.857654] EPT pointer = 0x0000000097ab501e [ 1070.857721] Virtual processor ID = 0x0002 [ 1070.860847] *** Guest State *** [ 1070.860872] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1070.860908] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1070.860947] CR3 = 0x00000000fffbc000 [ 1070.862996] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1070.863094] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1070.863134] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1070.863154] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1070.863213] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863256] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863295] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863354] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863395] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863435] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1070.863475] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863513] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1070.863553] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1070.863572] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1070.863633] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1070.863652] Interruptibility = 00000000 ActivityState = 00000000 [ 1070.863692] *** Host State *** [ 1070.863752] RIP = 0xffffffff8116426f RSP = 0xffff8880640879d0 [ 1070.863832] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1070.863854] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1070.863893] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1070.863934] CR0=0000000080050033 CR3=00000000940e9000 CR4=00000000001426f0 [ 1070.864206] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1070.864246] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1070.864259] *** Control State *** [ 1070.864268] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1070.864286] EntryControls=0000d1ff ExitControls=002fefff [ 1070.864308] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1070.864327] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1070.864356] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1070.864369] reason=80000021 qualification=0000000000000000 [ 1070.864376] IDTVectoring: info=00000000 errcode=00000000 [ 1070.864395] TSC Offset = 0xfffffdbfe24d3fa4 [ 1070.864440] EPT pointer = 0x00000000a87ec01e [ 1070.864500] Virtual processor ID = 0x0003 [ 1070.980412] *** Guest State *** [ 1070.980433] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1070.980471] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1070.980486] CR3 = 0x00000000fffbc000 [ 1070.980558] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1070.980601] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1070.980691] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1070.980712] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1070.980795] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.980893] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.981042] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.981124] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.981314] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1070.981376] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1070.981466] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1070.981503] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1070.981586] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1070.981648] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1070.981657] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1070.981663] Interruptibility = 00000000 ActivityState = 00000000 [ 1070.981666] *** Host State *** [ 1070.981675] RIP = 0xffffffff8116426f RSP = 0xffff88806709f9d0 [ 1070.981787] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1070.981839] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1070.981936] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1070.982006] CR0=0000000080050033 CR3=00000000940e9000 CR4=00000000001426e0 [ 1070.982085] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1070.982125] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1070.982138] *** Control State *** [ 1070.982166] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1070.982184] EntryControls=0000d1ff ExitControls=002fefff [ 1070.982225] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1070.982244] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1070.982263] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1070.982278] reason=80000021 qualification=0000000000000000 [ 1070.982324] IDTVectoring: info=00000000 errcode=00000000 [ 1070.982439] TSC Offset = 0xfffffdbfd07f36a3 [ 1070.982459] EPT pointer = 0x000000008fdcb01e [ 1070.982479] Virtual processor ID = 0x0002 [ 1071.510615] *** Guest State *** [ 1071.510636] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1071.510656] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1071.510673] CR3 = 0x00000000fffbc000 [ 1071.510688] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1071.510716] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1071.510755] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1071.510775] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1071.510836] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1071.510895] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1071.511237] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1071.511307] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1071.511366] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1071.511404] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1071.511455] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1071.511493] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1071.511535] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1071.511554] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1071.511575] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1071.511594] Interruptibility = 00000000 ActivityState = 00000000 [ 1071.511607] *** Host State *** [ 1071.511685] RIP = 0xffffffff8116426f RSP = 0xffff88805152f9d0 [ 1071.511813] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1071.511836] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1071.511895] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1071.511965] CR0=0000000080050033 CR3=00000000922b5000 CR4=00000000001426e0 [ 1071.512018] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1071.512106] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1071.512124] *** Control State *** [ 1071.512144] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1071.512163] EntryControls=0000d1ff ExitControls=002fefff [ 1071.512198] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1071.512218] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1071.512266] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1071.512285] reason=80000021 qualification=0000000000000000 [ 1071.512304] IDTVectoring: info=00000000 errcode=00000000 [ 1071.512323] TSC Offset = 0xfffffdbf8731e16a [ 1071.512344] EPT pointer = 0x000000008a95b01e [ 1071.512384] Virtual processor ID = 0x0002 [ 1071.556430] *** Guest State *** 22:48:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x43}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x40, 0x300, 0x140, 0x300, 0x80000001, 0x9, 0x0, 0x1, {0x5, 0x66e}, {0xff, 0x200}, {0x7fffffff, 0x9, 0x1}, {0x4, 0x4, 0x1}, 0x0, 0x1, 0x1000, 0x7, 0x0, 0x5, 0x5, 0x2, 0x5, 0x1, 0x100, 0x6, 0x0, 0x1, 0x2, 0x3}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="eec05e33cb5ae0bbca9fa92b8a584e0dc16a74aaa2e5958aa1be7e9816458a562afdc66cd4083cea85189c064e1056176e4d48c0d917387ecbfba9b827dc5260bd4bda3e63bf20f64448e00d353ed31132d9cc2f0b26c4b1ca7b7578dfd6fe3b27d62046a52c33a7c1a25b7bad3debb36c9eaaafc9f1c196a7de0ac9819f05ae874d3b9eaf23f84b6990bbbae9835802e99f2f021b977b9620bf983080a346ec45f571c323ad0969e0283cf8abd2dc6a0852e82a91fe62b64d9b812f", 0xbc}, {&(0x7f00000001c0)="1e1ab03ecd6ebd174a2eca3bf2b5e8dedc67d00edeacccd7c5617d7ed6e0", 0x1e}, {&(0x7f0000000200)="5b996a08f789eae7f0fc62973fa069adc61f674c", 0x14}, {&(0x7f0000000240)="d368e2b04049134d24abca618f01b4888cd8972e8d0798a5677e56a1cf2e5fa808b2a1785dea9c7c0bd137bf26ed9d84f25187951f", 0x35}, {&(0x7f0000000280)="f8afb57665a65b6be40084464acf9f51f52c392e7d49d3e12cdaadeaae921773311713d151789af7b1163204bf2f8c01e627c02005cd8e2a5f847aad1b1cae9c3345b37884977cce088d28a8c4cbb24597b1056e8b905f989876ce2ed305a9d8", 0x60}], 0x5) 22:48:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x0, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r1, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000240)}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002cc0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010100}, 0x0, 0x0, 0x2, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000004000)=[@txtime={{0x18}}], 0x18}}], 0x3, 0x4040001) bind(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002007, 0x0, 0x0, 0x0, 0x0, 0xf401}, 0xa2ffff}], 0xc6, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) 22:48:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:17 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$UI_DEV_CREATE(r2, 0x5501) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000080)) 22:48:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215e", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1072.538138] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1072.553020] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1072.570746] CR3 = 0x00000000fffbc000 22:48:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x3e9, 0x200, 0x70bd25, 0x25dfdbfd, {0x1, 0x1, 0x2, r2, 0x5, 0x8, 0x15b, 0xfc2, 0x0, 0x3f}, ["", "", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x40050) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xbfa1dcdcde6947b3, 0x0) sendto$rose(r4, &(0x7f0000000040)="8a9134177d03df9275f8d132f3318d9e73f61165e19b1437abf4bb02475860b7ea89984bb02f9910ea71d2d2b3cc4d648c80fbe8515220cf5cfb5414be5cb25c2d8b64a7b540db3433332a30d506381e80d825431faabef2bd7d7ed4641efa04f69e9fc5dfc85b1f75e2967b80daf34c62acb27c14208a2647ec3499b654825601f8bee816cd95cfd670e0b4b1495ba6c1eddf40a7f1a559bc656f13c870333757d450fbd89d173cdd3ab5d1632be8aaa754bc08af835ec4a9a9dfb01bdbb918", 0xc0, 0x48000, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) [ 1072.577982] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1072.577990] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1072.578001] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1072.578008] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1072.578021] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578032] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578042] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578054] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578066] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578073] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1072.578085] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578092] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1072.578104] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1072.578111] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1072.578118] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1072.578125] Interruptibility = 00000000 ActivityState = 00000000 [ 1072.578128] *** Host State *** [ 1072.578136] RIP = 0xffffffff8116426f RSP = 0xffff88805a88f9d0 [ 1072.578151] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1072.578158] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1072.578165] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1072.578175] CR0=0000000080050033 CR3=00000000a5688000 CR4=00000000001426f0 [ 1072.578184] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1072.578191] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1072.578193] *** Control State *** [ 1072.578198] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1072.578202] EntryControls=0000d1ff ExitControls=002fefff [ 1072.578209] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1072.578214] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1072.578218] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1072.578223] reason=80000021 qualification=0000000000000000 [ 1072.578227] IDTVectoring: info=00000000 errcode=00000000 [ 1072.578231] TSC Offset = 0xfffffdbf84814869 [ 1072.578236] EPT pointer = 0x000000008f80401e [ 1072.578242] Virtual processor ID = 0x0003 [ 1072.694819] *** Guest State *** [ 1072.694842] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1072.694900] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1072.694918] CR3 = 0x00000000fffbc000 [ 1072.694938] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1072.694959] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1072.695019] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1072.695041] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1072.695101] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.695221] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.695302] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.695441] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.695543] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1072.695589] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1072.695639] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1072.698083] IDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x0, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x14) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000280)={0x3, {{0xa, 0x4e24, 0x4a7, @mcast1, 0xc18f}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x26}}}}, 0x108) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000000c0)={0x3}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0xfe97) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000)) [ 1072.698160] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1072.698181] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1072.698218] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1072.698260] Interruptibility = 00000000 ActivityState = 00000000 [ 1072.698273] *** Host State *** [ 1072.698320] RIP = 0xffffffff8116426f RSP = 0xffff888058e779d0 [ 1072.698383] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1072.698421] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 22:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3, 0xffff, 0x7, 0x4000}) [ 1072.698459] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1072.698500] CR0=0000000080050033 CR3=00000000909e0000 CR4=00000000001426e0 [ 1072.698541] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1072.698598] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1072.698611] *** Control State *** [ 1072.698620] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1072.698638] EntryControls=0000d1ff ExitControls=002fefff [ 1072.698659] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:48:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x0, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1072.698677] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1072.698700] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1072.698718] reason=80000021 qualification=0000000000000000 [ 1072.698733] IDTVectoring: info=00000000 errcode=00000000 [ 1072.698758] TSC Offset = 0xfffffdbee5fa1339 [ 1072.698774] EPT pointer = 0x000000008613401e [ 1072.698837] Virtual processor ID = 0x0002 [ 1072.723051] *** Guest State *** [ 1072.723074] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1072.723113] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1072.723130] CR3 = 0x00000000fffbc000 [ 1072.723187] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1072.723221] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1072.723261] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1072.723283] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1072.723373] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:18 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @loopback}, &(0x7f00000000c0)=0xc) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r7}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r7, @ANYBLOB="08000b000300000008001900", @ANYRES32=r8, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r10, @ANYBLOB], 0x70}}, 0x20000001) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x14c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "5cc197443487fdacb7f6abe1490ec7580af1f574f862445f79fde6d61e9ca6674c27fc90ed1eb8b4f917037f072729e7aac75808dace08164a78ed19a7dab7079b828d0589c67cf2a76a1020e2aa01760867e22dc46eb2f4f6f720a2a9ddaabaf60303d4f5e2fd3a264bded96eb6780648609ae09931db4bff268f969a0536573c30b68e333fd00dcb1b6b74ff06faddea435d7110f7f6e9e4ca510b109be514f9e13ace3a674e9990d818e428c2c5444faf8e831961dda3bf24a98a0ab74022"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1073.277435] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.307614] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.314727] *** Guest State *** 22:48:18 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4001, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="11000000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) fcntl$setstatus(r1, 0x4, 0x0) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, r4) keyctl$set_timeout(0xf, r4, 0x0) [ 1073.340274] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.363465] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1073.379553] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.401351] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1073.409541] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1073.416486] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1073.418858] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1073.435069] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1073.459515] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1073.466662] CR3 = 0x00000000fffbc000 [ 1073.476141] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1073.479674] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1073.495585] Interruptibility = 00000000 ActivityState = 00000000 [ 1073.499414] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) restart_syscall() [ 1073.502384] *** Host State *** [ 1073.520539] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1073.526449] RIP = 0xffffffff8116426f RSP = 0xffff8880617df9d0 [ 1073.534108] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1073.541148] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1073.553643] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.587378] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1073.604441] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.611013] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1073.618315] CR0=0000000080050033 CR3=00000000a5688000 CR4=00000000001426e0 [ 1073.619198] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.639561] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.641176] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1073.649436] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1073.671058] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1073.671375] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1073.679212] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1073.699090] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1073.708273] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1073.708999] *** Control State *** [ 1073.719747] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1073.720678] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1073.726525] EntryControls=0000d1ff ExitControls=002fefff [ 1073.738950] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1073.739164] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1073.746827] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1073.757663] Interruptibility = 00000000 ActivityState = 00000000 [ 1073.761456] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1073.766817] *** Host State *** [ 1073.774417] reason=80000021 qualification=0000000000000000 [ 1073.780119] RIP = 0xffffffff8116426f RSP = 0xffff88806767f9d0 [ 1073.783957] IDTVectoring: info=00000000 errcode=00000000 [ 1073.789670] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1073.795489] TSC Offset = 0xfffffdbee41aa1d7 [ 1073.805173] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1073.806347] EPT pointer = 0x00000000a4e6b01e [ 1073.813692] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1073.818534] Virtual processor ID = 0x0003 [ 1073.824059] CR0=0000000080050033 CR3=00000000909e0000 CR4=00000000001426f0 22:48:18 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea279", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:18 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x220, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040044}, 0x800) fcntl$setstatus(r0, 0x4, 0x0) 22:48:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x41) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis128l)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 22:48:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10002, 0x0) [ 1073.843646] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1073.850454] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1073.867544] *** Control State *** [ 1073.877488] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1073.897080] EntryControls=0000d1ff ExitControls=002fefff [ 1073.904606] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1073.918022] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1073.933003] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1073.939735] reason=80000021 qualification=0000000000000000 [ 1073.951469] IDTVectoring: info=00000000 errcode=00000000 [ 1073.953611] *** Guest State *** [ 1073.964977] TSC Offset = 0xfffffdbe95baaefc [ 1073.972394] EPT pointer = 0x000000006716f01e [ 1073.974674] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1073.978072] Virtual processor ID = 0x0002 22:48:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x0, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)=')\x00') ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x162, &(0x7f0000000040)=@generic={0x1d, "1395b147ae229216a2b3feccafe76552b04cafffe89c3eecefcafbabef114486d0e618f22d82ff15c9c29f3f3301f139d04d010806f85c916ff65a1d279d7a73da7197dada7cd5cd172ac3847e70d6ccaa945f4dd8b29a59e3264b41cd06a42a1e5f6d056731db23a65fe0b20a01484d7793c3d7616a886ea77edbf81371"}, 0x80) 22:48:18 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x32d803) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x8, [0xffff, 0x2, 0x6, 0x8, 0x1, 0x9, 0x401, 0xd63]}, 0x14) fcntl$setstatus(r0, 0x4, 0x0) [ 1074.014746] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1074.043214] CR3 = 0x00000000fffbc000 22:48:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1074.074600] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1074.099012] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1074.145999] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1074.152270] *** Guest State *** [ 1074.167788] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1074.176235] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x201) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x1}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)="a8caac9fb082e710ab2bca0d4e755a20cf4272966a3fb09ca92a13af6cadb24310a698ba6205bbb26cb8115b81fea566527553ace616934dd5bbba610f50066d320e300d44c39f006aa05bf332170c854d634935215fcc579e5ba602461996ae397aa5387e647d717f36d2d6749b9e03349f97180f9a330ddf854387c4f0c1267270047c5cf2bc40d0fb5033a7d604e9d162ffb394b35185e2d887f0246cce274bb7d8087b24257ed58c89384823edf9f4b81691d4", 0xb5}], 0x1, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20000840}, 0x24040880) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1074.196131] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1074.221199] CR3 = 0x00000000fffbc000 [ 1074.224203] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.229546] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1074.248219] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1074.263553] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.268089] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1074.289823] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1074.290949] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.313333] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)={0x8, 0x3, 0x4, 0xc, 0x100, {}, {0x4, 0x2, 0x4, 0x1, 0x8, 0x4, '\\;}('}, 0x7fff, 0x4, @offset=0x6, 0x27de, 0x0, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000040), 0x0, 0xfffffffc, 0x4, 0x6, 0x1b94, 0x2, 0x801, {0x0, 0x1, 0x7fff, 0x2, 0x9, 0x1000, 0x9, 0x89f, 0x9, 0x20, 0x1fd, 0x9, 0x1, 0x3, "9f7916ce34228d951b6460e613dc1ae265a14c471f48b54c00741605e531cff9"}}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1074.345615] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.349820] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.368596] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.390962] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.398166] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.416834] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1074.445546] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1074.448215] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1074.467222] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1074.488467] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1074.503151] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1074.511483] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1074.511662] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1074.529502] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1074.544246] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1074.552609] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1074.570730] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1074.571694] Interruptibility = 00000000 ActivityState = 00000000 [ 1074.577181] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1074.604545] *** Host State *** [ 1074.611260] Interruptibility = 00000000 ActivityState = 00000000 [ 1074.614327] RIP = 0xffffffff8116426f RSP = 0xffff88806767f9d0 [ 1074.617517] *** Host State *** [ 1074.617599] RIP = 0xffffffff8116426f RSP = 0xffff888066a879d0 [ 1074.617659] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1074.636976] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1074.660364] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1074.671728] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1074.679616] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1074.690394] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1074.696501] CR0=0000000080050033 CR3=00000000855ba000 CR4=00000000001426f0 [ 1074.710689] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1074.713143] CR0=0000000080050033 CR3=000000008fdca000 CR4=00000000001426e0 [ 1074.717353] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1074.717357] *** Control State *** [ 1074.717363] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1074.717368] EntryControls=0000d1ff ExitControls=002fefff [ 1074.717377] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1074.717383] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1074.717388] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1074.717393] reason=80000021 qualification=0000000000000000 [ 1074.717397] IDTVectoring: info=00000000 errcode=00000000 [ 1074.717402] TSC Offset = 0xfffffdbe3b23ab19 [ 1074.717410] EPT pointer = 0x00000000688d401e [ 1074.741890] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1074.778734] Virtual processor ID = 0x0003 22:48:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea279", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4487b75816419a166fef9654776949f2095a313860bb129ec33cbe66bd", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) syz_mount_image$cifs(&(0x7f00000000c0)='cifs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000380)="3a15913e90744f9dc13450216a41f68ab63158db5acceb5a6e50594861d87f9280909b29e707580da59736b7f47ec8fc01189cb5321a16f71d2338de23195d82155c23462216534022f39f37bc4162eca8936734ab0d91fbea3d38d982b29392a646080243ba08d5cbb15897f7eb8be92dfaba46565bae04445afde216918dfce4b114965529d90a74a06aa782172abc59ed3e1a53570e107b9ad619b51e7a2c6beffbb0dd4dc82ff4fdd73f08b7d5abefd8c00e5794f0e1e865fc4145ccb762e68eaf5560019fb765bc60452452c048359c", 0xd2, 0x4}, {&(0x7f0000000280)="8aec77b8c3f15461d879636739da0e3846be1e87265f9f159fb920d4714628f671e03c41645244e68e892218384a5a802c6f50875518fec01909faf0bfa9326de752898b0137435c65dfe9c2a88e30fdb7d092f592853c2994610aafa5c7fe34b1b58654fe45616083ce8230a65eeeeb41c0bb74b38f45eaee5382dd88758fe942f64463f0f2010200a188bc92fd5c97aad2a9f554533b05fad239fed6b1b4221d3b4ecc02e2275525", 0xa9, 0xfffffffffffffffc}, {&(0x7f0000000480)="da6670c8832c707ac160b027b2c5b748c3d07b4a9c787f9cfd7572110a08f6565c8b38eaf5a012b7db9f55f96a8fea495f95d1953865e2936e703059d302f3c2e79a17787238568baf4459af5165c95f3f646feff17404f2591c552af2d65717", 0x60, 0xce}, {&(0x7f0000000500)="089fe307599268b34c1c16f8eee5f53ba1ca9b2a0d717279e7a8f52c42457d9bd01ce53a2d7795f7c4369f14fc7dad56b03097e6587f9590f9cd12b98f5a9d00f659b13fe2a86701c39c4fc4be9ce5a6ffcdec642ebb70a2cbabfd965d053cf6ee06e639a1f761ff8b6d9085c95b7b2de4f72c2537c4396361865a7aa9335bdbfb55a7ed6cacf0f3338175e7d3cba124ba4156e4564c58d52fcc94ffe43ff1dbadcf00111c2f0e3ffd7fce4a998894c1e4760368d5b9567f8011dd37", 0xbc, 0x80}, {&(0x7f00000005c0)="462e30de3dcb7d9be61bb91e5a5dcf364142e056815c7f655f9cdac5cbdf5e175cf0a5fe2ba57557ea6b21046d32b9c5053307c17c99ab4a61420cad73633a6e702d3039456595d4d210b399566713fc576aa8bb03f1c1e8c6a6049236ba7c13726eb4beb45f5713d1f4d2fbd2bc9da0e9d8db1c16f6e7499889ba069928cf8fe26b0d49bcbf671b67d401672f33c07829668588e9fceeda5e56057a7114145aa09cade32ffd417dec8f5e0f265141b9cd66b187e1858e46e365761ea3a05f921e16c2ef62bd9ed70f13459ea4e3d8ea247c83e8c507b210682dabd45f0954190801df2a2e11f55f680e740b532eeefd5ef0c9b3", 0xf4, 0x7fffffff}, {&(0x7f00000006c0)="ec935117b09be37104df3945ad708e3b805fa49f18d7253391078296b955b8f50b12f2537c91ac586483d48bda51c4e0caeb3477365715c7afd2e6d1abccd12b20f8700ec903820c18122be75fb87ebe7e6c30c4ccb868233a05a78badaf0893c0f7fd45b6ff79513c57a47c", 0x6c, 0x79}, {&(0x7f0000000740)="09cc372698ae9e80392caa232166ff283c4a0c086bec3cf2a60f308bfe26a76692f8b225a27b1e24dda04a368d52e1dcb2a29ee2ead4d099f7d0159c2186cd198356d85c4087fa875f7bf4617eb84fc52ae726f5820cf33a15a6", 0x5a, 0x7}], 0x400, &(0x7f00000001c0)='drbg_pr_sha384\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r3, 0x3}, 0x8) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:19 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x29489b4dc6eae50a) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40200, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f7796fa2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b", @ANYRES16=r3, @ANYBLOB="02002bbd7000ffdbdf250200000c080002312836c0b42097931c21fdab5a1eb3e475f2"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fbdbdf250202000100000008000100020000004c0004800800020003000000d5000c80e40005000000000000000000fff7000000"], 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c010) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000013eadca4065d99ad7cdb3c37ab60ea42c17d13f556290686e833613c69010b0dbf0deeb202cfa4be092eaaf2142f7974f7c1f988377bdb0307c6804b4f589d214017c5217cae84989241b08e8ed62157eb51c25fe000000003bae4c88bad50000000000", @ANYRES16=r3, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4004804}, 0x20044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x1b4, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9abb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x105f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e6524ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42a74475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c1d2d0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e11d6c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42876c22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f75543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14378d34}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6562eb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x231a3a29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428f1395}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3137}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1173dfa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c68dea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d11c120}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd9c2e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25abb36d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1242b9c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefcb8e0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616f4c0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158c3f91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ec4792}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8d80d1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245f9576}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682c4067}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d4d31d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d31dff5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x141aa403}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22aa0963}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00012abd7000fcdbdf25e1ffffff0700010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffff8, &(0x7f0000000040)={&(0x7f00000008c0)={0xb8, r3, 0x400, 0x70bd2d, 0x25dfdbff}, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200028bd7000ffdbdf2504000001040000000000000034000480050003000003000200000005000300060000000500030006000000080001000300000008000100ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x20080000}, 0x40880) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c0, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b6f8b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f99ae34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x690babf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7382}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7771707a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49d48db0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3346b431}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfae2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x134a70f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7435d7f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636d6af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x741d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x129d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2dbfa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54375d49}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fdc44b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d24852d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x146}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54bfd07d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7342}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe429}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6945fc1c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1143}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ac40ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37a22ae6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f0e32c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2fac04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48f00ab5}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa97e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x365a7096}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9896b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f677a64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69830a6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7041}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bb2de59}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x880}, 0x4004000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8029aa17975c25faa4b46a80cf94af41561824487cd9c431d870ea6d15e4c8d913cce39f428fa086d9ad57083ae900"/61, @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf250400000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4a4, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bd38ca2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x465f9a33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d5497d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285cb716}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fa7a8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3794637b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d7e4d1}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da1f9fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5945c8a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55181d0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c1652e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a40572}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0e25bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ada4b03}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dedca5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27606dd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12721582}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b7086c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e46195c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13512cd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b86b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x988b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c696899}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e63928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x88ce562}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63289759}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a98513}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xff51a91}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f420979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x411a41b1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a7c38a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f6be5b8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e619f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69c3a9df}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3152fac6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6434daed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x572e3614}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d40d406}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x113b8719}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28a32a76}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e33ad60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x199812c2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42849961}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f55fd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2877dc60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73cc6733}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143c4199}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6beb896c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3316f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b48529c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d64c12a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7faf32f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x640ff857}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b8e51ff}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f7bfcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2551d54f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e8f91b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f15710e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x268b853}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5193087}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d1135eb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a11bea5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41eea327}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2f3ba}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a5a757f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70afe163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d171e1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x355054cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60611604}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20040004) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x310, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd090}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3255dee1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb62}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b71fcad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fe7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e619227}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c34cfb9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2abb695b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd22}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf18}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe002}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4307c6cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18b2906b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe013}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa49b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12021f07}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ab469ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26a50e79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x835}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d7cb6a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c753fc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x895c2fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310e07b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab03d3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x956e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f5e55f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e892cce}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13a0ec35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e634f70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x421238e5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cd1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f4e6033}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc218}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d455fbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc422}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x182f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ebb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c58}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6704a7cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f20012c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19f09e3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49ce30c0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ddc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1caaf21f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x460c58a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2515b7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4627}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1532c66c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x114b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eff29be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4eb30c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ad98da6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbac0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdf0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a2b5d5c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50ea3048}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x489f4830}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cea0662}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x811}, 0x2404c001) [ 1074.859819] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1074.877629] *** Control State *** [ 1074.894303] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1074.909822] *** Guest State *** [ 1074.917688] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1074.926854] EntryControls=0000d1ff ExitControls=002fefff [ 1074.944691] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1074.947230] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1074.964830] CR3 = 0x00000000fffbc000 [ 1074.969914] device lo entered promiscuous mode [ 1074.973839] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1074.984223] Y­4`Ò˜: renamed from lo [ 1074.988579] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1074.995196] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1074.995207] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1075.015859] reason=80000021 qualification=0000000000000000 [ 1075.017493] CIFS VFS: Malformed UNC in devname. [ 1075.024336] IDTVectoring: info=00000000 errcode=00000000 [ 1075.038106] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1075.042517] TSC Offset = 0xfffffdbe1db7e890 [ 1075.053462] EPT pointer = 0x000000005cf7d01e [ 1075.059822] Virtual processor ID = 0x0002 [ 1075.062431] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x0, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:20 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x22000) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000200)=0xc) r2 = socket(0x4, 0x4, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f0000000100)="5a74e20daca3d15b0baa7762a412e99520df0688a1c70e81aae4d4e781d866cfaea87cca00f5a2b1e8cb907c43f75b085f0abc0be77b8e841e221d868dc120a98a8a307b9266c3685738d1e53cca29dbef40b655c657c1560496b7c42ae603f52e89f92ed6da6383e789377e0edce3216b7498414d03882dafd6f01f99baa10b0a9b5a") ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getpeername$netrom(r3, &(0x7f0000000240)={{0x3, @bcast}, [@default, @netrom, @netrom, @remote, @bcast, @remote, @default, @null]}, &(0x7f00000001c0)=0x48) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1075.114891] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.148549] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.180883] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.207440] *** Guest State *** [ 1075.209108] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.217144] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1075.227315] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.235214] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1075.247585] CR3 = 0x00000000fffbc000 [ 1075.253978] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1075.260387] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1075.273886] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1075.280093] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1075.289825] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1075.300310] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1075.309877] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1075.323488] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1075.338606] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.350031] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1075.359781] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.372964] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1075.382276] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.390497] Interruptibility = 00000000 ActivityState = 00000000 [ 1075.402295] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1075.410402] *** Host State *** [ 1075.415749] RIP = 0xffffffff8116426f RSP = 0xffff888066a879d0 [ 1075.423910] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:20 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000080)) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$6lowpan_enable(r2, &(0x7f0000000040)='0', 0x1) [ 1075.434519] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1075.443031] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1075.462483] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1075.470360] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1075.478579] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1075.506191] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1075.518360] CR0=0000000080050033 CR3=00000000603fb000 CR4=00000000001426f0 [ 1075.536577] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1075.546801] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1075.563952] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1075.570229] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1075.582332] *** Control State *** [ 1075.585892] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1075.597134] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1075.607725] Interruptibility = 00000000 ActivityState = 00000000 [ 1075.616910] EntryControls=0000d1ff ExitControls=002fefff [ 1075.624959] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1075.634426] *** Host State *** [ 1075.637686] RIP = 0xffffffff8116426f RSP = 0xffff88806767f9d0 [ 1075.646397] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1075.657619] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1075.666613] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1075.675625] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1075.685772] reason=80000021 qualification=0000000000000000 [ 1075.702642] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1075.709418] IDTVectoring: info=00000000 errcode=00000000 22:48:20 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x2800) [ 1075.728983] CR0=0000000080050033 CR3=0000000095439000 CR4=00000000001426e0 [ 1075.744208] TSC Offset = 0xfffffdbdb5daaee3 [ 1075.748523] EPT pointer = 0x00000000a5a8701e [ 1075.763416] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1075.770213] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1075.780235] Virtual processor ID = 0x0003 [ 1075.790040] CIFS VFS: Malformed UNC in devname. [ 1075.813906] *** Control State *** [ 1075.817496] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:20 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea279", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1075.828158] EntryControls=0000d1ff ExitControls=002fefff [ 1075.835811] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1075.843472] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1075.860312] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 22:48:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x12180) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1075.898086] reason=80000021 qualification=0000000000000000 [ 1075.917167] *** Guest State *** [ 1075.928675] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:20 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$setstatus(r0, 0x4, 0x0) [ 1075.945485] IDTVectoring: info=00000000 errcode=00000000 [ 1075.965592] TSC Offset = 0xfffffdbd8c6d4460 [ 1075.970241] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1075.985852] EPT pointer = 0x000000009226501e 22:48:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(xtea-generic)\x00'}, 0xffffffffffffffb2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1075.997737] Virtual processor ID = 0x0002 [ 1076.003129] CR3 = 0x00000000fffbc000 [ 1076.022003] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x0, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1076.048804] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1076.070973] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1076.077936] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:21 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000040)=""/191, &(0x7f0000000100)=0xbf) fcntl$setstatus(r0, 0x4, 0x0) [ 1076.126097] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.151144] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.167170] *** Guest State *** 22:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0xffffffffffffff07) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1076.175929] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.177583] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1076.192548] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.209615] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) [ 1076.223944] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1076.238654] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1076.242919] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1076.253516] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1076.288173] CR3 = 0x00000000fffbc000 [ 1076.291484] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1076.305094] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1076.310332] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1076.322780] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1076.330620] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:21 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x87, 0x3, 0x46, "2fb8d9bcac0d7c683117170f03ce7707", "3761190ba40aae2f7e74566be32e0ac50512df4a77c481261b08625a9a0fe556abc29b5295b2f6c57514200481c24b4aca8c1abd14f413e999adcd29c825d02648a4691e7f7d789570484e09e7be028ad122ba7955facb11a363d0fae5ed0eb50c110e7762b776c54a7b028bc6df484f1224"}, 0x87, 0x1) fcntl$setstatus(r0, 0x4, 0x0) [ 1076.336827] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1076.348127] Interruptibility = 00000000 ActivityState = 00000000 [ 1076.365713] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1076.378602] *** Host State *** 22:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1076.394647] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.404595] RIP = 0xffffffff8116426f RSP = 0xffff888050d0f9d0 [ 1076.408013] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.428627] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1076.435634] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.465233] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.467000] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1076.499811] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1076.506068] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1076.506144] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1076.506273] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1076.506294] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1076.506354] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1076.506374] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1076.506413] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1076.506433] Interruptibility = 00000000 ActivityState = 00000000 [ 1076.506445] *** Host State *** [ 1076.506527] RIP = 0xffffffff8116426f RSP = 0xffff88805b50f9d0 [ 1076.506616] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1076.506695] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1076.506754] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1076.540293] CR0=0000000080050033 CR3=00000000861fd000 CR4=00000000001426e0 [ 1076.608145] CR0=0000000080050033 CR3=00000000a05ec000 CR4=00000000001426f0 22:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e21, @local}}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) pipe2(&(0x7f0000000000), 0x800) 22:48:21 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x80000000, 0x8, 0xfffffffc, 0x6, 0x3}) [ 1076.647580] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1076.677722] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1076.707634] *** Control State *** [ 1076.717581] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1076.741442] EntryControls=0000d1ff ExitControls=002fefff [ 1076.747973] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1076.759271] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1076.773536] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1076.786269] *** Control State *** [ 1076.786874] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1076.794183] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1076.810286] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1076.813201] EntryControls=0000d1ff ExitControls=002fefff [ 1076.832333] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1076.832882] reason=80000021 qualification=0000000000000000 [ 1076.847146] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1076.860544] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1076.869059] IDTVectoring: info=00000000 errcode=00000000 [ 1076.878113] reason=80000021 qualification=0000000000000000 [ 1076.880994] TSC Offset = 0xfffffdbd0c1ca86d [ 1076.892080] IDTVectoring: info=00000000 errcode=00000000 [ 1076.902445] EPT pointer = 0x00000000a543a01e [ 1076.915966] Virtual processor ID = 0x0002 [ 1076.922740] TSC Offset = 0xfffffdbd2ddaed5a [ 1076.934844] EPT pointer = 0x00000000a839d01e [ 1076.948321] Virtual processor ID = 0x0003 22:48:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffe4e) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x70d000) fcntl$setstatus(r2, 0x4, 0x0) 22:48:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x0, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1077.077794] *** Guest State *** [ 1077.089847] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1077.128696] *** Guest State *** [ 1077.129938] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1077.141709] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1077.141756] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1077.141787] CR3 = 0x00000000fffbc000 [ 1077.141812] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1077.141834] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:22 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0xa, [@datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x1}, {0x5, 0x4, 0x3ff}, {0x2, 0x1f, 0x25b417bf}], '[d'}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x33}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x58, 0x0, 0x5f, 0x30]}}, &(0x7f00000000c0)=""/57, 0x66, 0x39}, 0x20) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xb2000) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x1, 0xb, 0x3}) 22:48:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$caif_stream(0x25, 0x1, 0x1) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'ipvlan0\x00', 0x200}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1077.141893] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1077.177907] CR3 = 0x00000000fffbc000 [ 1077.208104] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:22 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa04c0) fcntl$setstatus(r0, 0x4, 0x0) [ 1077.242882] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1077.249486] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1077.265620] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1077.286752] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.299473] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1077.304736] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:22 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0xa0400) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) fcntl$setstatus(r0, 0x4, 0x0) [ 1077.339648] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.348093] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.367963] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.373805] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.398901] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.407020] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.407153] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.444505] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1077.444647] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.462663] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.480408] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1077.486333] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1077.497309] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1077.510418] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.510865] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1077.531067] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1077.542592] Interruptibility = 00000000 ActivityState = 00000000 [ 1077.551973] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1077.555745] *** Host State *** [ 1077.582828] RIP = 0xffffffff8116426f RSP = 0xffff888051e479d0 [ 1077.583862] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1077.595592] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1077.612413] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1077.629195] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1077.632141] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1077.636779] CR0=0000000080050033 CR3=00000000a8c7b000 CR4=00000000001426f0 22:48:22 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r0 = userfaultfd(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00833a200096ed8cf8f7b97b7919c3e64c459a331d7156a601199b4b006af5dc0aad566b5b78a7117e0d911daefd95492935a31ac07422ca57a47bbe540267183d9576d4eb1895b4a8b917dc22d6647c71ef38e7c3519b4d9bd9446dd08c18e199c6d5da66f81c8d4ec29b6d955554b8e1b8b058b826a4ddd58ece21f48aa5f099add544d100"/145, @ANYRES16=r2, @ANYBLOB="010300000000000000000c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0005b88}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fffbdf250f0000000800390003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x74}}, 0x18) fcntl$setstatus(r0, 0x4, 0x40400) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) mmap$dsp(&(0x7f0000285000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x0) [ 1077.655104] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1077.659593] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1077.668651] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1077.681549] Interruptibility = 00000000 ActivityState = 00000000 [ 1077.689228] *** Host State *** [ 1077.692489] *** Control State *** [ 1077.692516] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1077.692535] EntryControls=0000d1ff ExitControls=002fefff [ 1077.692979] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1077.692999] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1077.693019] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1077.693039] reason=80000021 qualification=0000000000000000 [ 1077.693122] IDTVectoring: info=00000000 errcode=00000000 [ 1077.693141] TSC Offset = 0xfffffdbc86cba176 [ 1077.693181] EPT pointer = 0x00000000a9bb101e [ 1077.709084] RIP = 0xffffffff8116426f RSP = 0xffff88805b50f9d0 22:48:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x0, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1077.720406] Virtual processor ID = 0x0003 [ 1077.746962] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:48:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={r1}, &(0x7f0000000340)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000003dc0)=ANY=[@ANYBLOB="24b0e84572d535a6a126e64bd0821f63fb26282d0f2100fe2a3ff8ff836f00000028eddcaf7e23fb20941114dfdafa96b4be768ac970b34f2b0df7716967fbc66cd91b6e95b65bb316f76512556a1dbfe9f341f94e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f0000000040)={r5}, &(0x7f0000000340)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x70, &(0x7f0000000040)={r7}, &(0x7f0000000340)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000005800)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000040)="e74cb1d0ef8891859a03ab0f2f3983dfbc16dc952549053fc869ec044fe2178894f1d31b40b5ef690bf79b55a9cb3b", 0x2f}, {&(0x7f0000000080)="3f06d8d81a14d3ca9b29a57533e0c0e63ee3448f05895d58aa4009430a11b1619b8a96005f6976757119969d200356ae776839e61b51e779aa0f6abac87c69a10be10c7251c7344ba4ccae55571dc044fe7cc342ef459b191a80550b13896ee2294d6ed7c325611e9cce223f", 0x6c}, {&(0x7f0000005200)="de9954ed5ea8cb3606d42669aa6053a7e3df882389d99a6c89c0080d6ccda0c69c919042655c4186ae135b756fb9d5426c1c771a92253568bb3ee6bf1dcbed20a870e93170eb0867943f8b1caa973e5ee7feae720a2c4807d38b9586c8e28548238c8ecd827b4a803eb105c84b7dd5e7e8421933674726d3d4c3780862a11e4e555998f85d64a93523989f80b84fb0e69299275226cbd3d1ee1da081f9d751d6e1a2879ddf1875855f49a7e8818e32781ad6d7325b45a0", 0xb7}, {&(0x7f0000000340)="666e8da5673d77d9f5dd1adf95d4505300a660210937a9cd6367abe22029ef8a2e240049372e6f4e69e8503bb117b6baaa4721a5afd0022593c0ced1b4ae31b5357301e48051d92523c08c856fe3de04fadb6ed7727b6b380bd70334edebf555857a39e66e6a885f0c7b82845c37d394dc73c586fc24241dbae30f3945aa34ca0db6454de29ecf224c1b63f1aa2532f9a86fde69f2d4afbb9b7914b890d0a46e088ef9e99e492aa4aef46bd0adbe01e223479c712ce4a6eb8ab54ae060ade7e2b7d03e1bdd5cde7c110d7a0b35de77d356afd4272af6a5ed7da5f4e326c36c20904cbb01ddd531f7a213", 0xea}, {&(0x7f0000000440)="721b88bd8ea02d26b4ff5a54f7424590d0d3511e8bc5b0767f2aeac560c3e1e0a4859c19a0f26d627e190dfe3fe259a7ffc154a2e2bde8b5fb0bc40e185615ee17c54433f95fb20ea46d76264203640f7bb3e05f1f7a0266950ee56922c6582f0d5872bf787e1396e2ed64bb2420f5fce454f79a98fb712e21f3d371f2f3551b669505c03f42b6500f756a6c7ecc49b8a8dc9f4332cbe2474122a1e1fcd354d45ec5b42019c9cebbc5c81d9023de8852c8c1011ce7bab7", 0xb7}, {&(0x7f0000000180)="03a9fa21dfef97a5cad8b2ee4d908229b3c837cd063d377f09ef8f153d37c975372df0118b660fc04258278a145e49785596a433af74f11d5d92747ac248d2668f1eee90fd4bba02f83d3ae4f960c5d4df6aad3f8ab48afeb10e857026764a418d27d7738cc5ce81d9196a089a98", 0x6e}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b0e610274e6520189b83dd002b23b84cd0753ac8b21651d91b2800a21b31e88fe8d4242fa136f1820d0af03b447e0445db1a482218dc9d0c7e3c8eec5ffb664197624d7831eb08041a06fe32191d0edff862f1281c2580dd7ed27db1af0b6ddbe8b8be5fc4d11e0e9dc385c62cd7a6f025665d3e06038996102038584b399697d6cb45803c28fb76499eb700136a6a5c672bd100a1b6bd7bf9e276e48b7d74fcdcbed1346ee982d11a36d0961bb9b20569947145245d8a27d30d5fcd71939c9d8a1f5c", 0xc3}, {&(0x7f0000001600)="aebf60dfe6eff8d4a6079c87b5470dea6fdff61514a441db9baff689328d10038cb18f81110e2e627ddf5c0fe14e21fe565653a7ad800080fa00afe9f360fb383e68ca647d513a86cd52278e9f4b998abc7906efdd87dbc38ae2e4274c056207fe0410cc7022c48b70f14d405c0cfab1dbb10da96480365cafa95c414e5ebe3b901a58db8a9a", 0x86}, {&(0x7f00000016c0)="ccf44826ff1114730f4d665f9af26260c2914cb81da4114f656d78a8b656511025472e913d75d4872c41a078248a33c6712999a924adde3f994ab97d1c7e30844f8faf28cde544398d04132476125844e539eda2b664afcf049492ccadf94bcfa9f0b0f3e28803ee77e9f1d82ca96e3b783901d15426fb65179539cddb93add9dc1bae59e643797bd2ac5ae19093cd8522fe", 0x92}], 0xa, 0x0, 0x0, 0x40005}, {&(0x7f0000001840)=@in6={0xa, 0x4e21, 0x46c, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0x40}, 0x1c, &(0x7f0000003b40)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="43b4886e6a12c8ffbb65e9d9e5", 0xd}, {&(0x7f00000028c0)="08620328ea721b31d4b3c68c235e5285367a5ccdfa3157c7ba45722749ab08a70bf97332f09875b965afe5ba1fc4ade261e994650c503cb4afafb657ad82677f9d10180c5aa595ecc0e0dd410f49d2f30a8aa286ad6135848a110c8f3cce490fcd0fe820ba498ba1219e80bb52c466216df8fe799332b476019649504bd2ad4bf70a63a8c22ee11f2cf4a6b5ab8172c1deb3f6ecae41568f1cb437", 0x9b}, {&(0x7f0000002980)="bf89ba8b5a5765f3ef2b7e174ab86173b10494d1a474af71c3f2319a7c138be88c8e9b1b21bbf181b4941fe6ea36cccfe0bf96f3ebb6a7f139ea05b3680e8749a99750936a9f2bbb1b6bac7c62efd4a6bf1fa38370c9a5f1f5af07a48bf28ee7fd8716be66db39082f41294db7ed62b0e0d5e140e347bda85dd17ed14f1e1ab56856b56d2f9827d052ad7b208e0a403264e5863c0f91613173daed44ef1c79605b056bd8b29f41a74fa4b830fc88b705657751011201214efc311469bdfc6d084cf9a8cf1cc9040f0f8b89b2adf5657bb800cea582db527837ccc165dfb99150742901d310dd56e25b907bbe794a849b8386dd", 0xf3}, {&(0x7f0000002a80)="9dc4504f91286beea43296aed305ab9e735a97f5c0333ca05a0b72f68de2079f403c1f28", 0x24}, {&(0x7f0000002ac0)="ef18b0a4b36a287c30d55959f75951e0bbeed0349164541a91c994188920b7d9bfa08507fe8b76d6316b1ab1aafa5f0b03b50a5de8efbaed209253c666da4e488780c0dabb3e9e4c51a4dd6185049548bd8cc576310e3f9ac3dcfedb9b", 0x5d}, {&(0x7f0000002b40)="037bb728eb82d36d2523685138378820c680fba10c53509b2e9e3cc834d644b550ea94814a6d7cbff1feaf2f59075d7e414a086e9ebaf3471cb20aa60b0aa10ae27c7ca16dda542afc733d80d1e5dbf5e05ac08e8373049d16fb5cd6cad0fcdaf6a06d23c4fa42d87273c8329c7ca620fe7e3e33d61396381c2d92970b40321626cdeb1b2197f6f249ca32b010306f6a7a387626a139768b5800a8df2207cdc3786ea41a40067602c1e8ccdd41c7600db0b37fd211ab68a10f628acf5a8da3a22c8e9c1b2c9bc8fddcbfaab4447dc66d84411346e5b282638472c2a9cd5e32350df6749317734a115214817f447e2407aafa32c46f8de213fbc267d0922080a8d3a61953124c30fb8c449193fb81cbfae9d35b76bfde6e8a14175d5257eb9f96a70f2993f2a0bdf0c7e9baa875b038338af6aab325cede4564e2f35e37fd92500d28488f845c21cf8025e14bcf58c18f6c935d5182adbd9ce8a4d10fffa335fa0f96c31643f1a39dc5e74d0a52ea5e061a290553aa0109d43aa4e6a220e16cc3995fd9449eaec5357ac47d374f3c3cbace2c32636c22a9f71398c664c57aed6bd7838570cf70553f9067103368d4b4c228f427a5e9e68851553a20999fa7a6199f0127a9d4e5bb46f8f2be1a4b1807ed26c71223f9128aed9aa00ffa466de8b512b7d7c119eb5d20d6df0ab76a019bd29018696b21fa7bea528f33aa5f97dc131f5b9ee62e970912e9551b5f2ae4013c97a3dbaab86766c1c4205d1ab4b25a8b9b6eda5a0236b59ff62ec8074db6f6a34bb26d1282ac8edd821baf2082c3f8bfb44ad165f1c31b2fea41447962cc4550dcd29f799ec4f7e5ab7f017c2b9375c40b24bc48d4561be3c050f6094688c3fb7b0b38d069948dd13c01af82e097a0aff1afab50c126c0fbd2e9d33fa97d60ae0ea2ce77ff92f5e1e7846a8841f1471f374acda03dc14da66b5119974aa06fcec6971108e4d30e6b3bed3eda0365afab639617eb9f2bbffbc41d6cbd1546c7a597dd34fdbc6b1dd8738a89c95b7d2f2dbb12e333baef04d4b7cd51202ab5d763ee89dd78fa9076b6207ebe2cbe38c514413433aa7198fc3cd31e6d7572c0a58cc79f2db09197391875732475eccd862dca34be0746806443816fd4a1987b20dfccaeb4bf0d84993912b8d896667fec049ac0468486cdbde0f2049af49fa7caa2bae60e40f2d4d717f25112d699e37518f7f526b1c6cec083293c12fcfef68e5e97679b7b2742e030fa1da24df5e61e6b0ba49e2a70268454baf6aa253219ca2aa69b62d01e9f6c24dec5480a3d3ccd6dd6563152d321617607c9cf3ae10281b3b3949c504efa5e354b3c60193b7f9a7f658aae55f98771d35388f891c5626bcad468eac2eca900f9a0abc08d9e820a60047122d3ac81a0979cf1c2d8069738fd5aed754f5664e7186d7d32179a1821afe773f9ace950cf071d31b1270173faed0968d91d90faea5277f3b80d1c19da448def4802964ddd310b338e708ef3bbadf5dc57b81ad06dffe490691a0f80313297a470ceaa6ba46f191d70429702527c1d032c687e01b7107026aff98c7bbbeafd59cc3dd8fbe7c06c0eb13cba9b1f0dbcd2a0de182c9084a38757c7af598129cd71c29db1dce2d65ec225ef03ec896a1d79b721d6ff04066f6a172de82bd97e747700549439cf5666223eabd6828caa4075d0d017cb060df50845facd56c68cd86fdd70a669de1e854146a6a1fe7b158a9d5a17ea8658add5030ad82865115c797fb8abe8aca5d2e373ea690afe301802d2e82166a263881c077903c94db76f47278db310a30a536987157db70ae7e847f87bdd80f8bc0af55c0bb58cb11e5d842153794950f6ae70e4b0cd53e3be7222c2ed056db32651bb94fde9eebe2176c0d80f12a81ea524cd36b193d0e6e41fbb751d6b5e2121c5eed84a2e7a5c1693b151ae9e007b3e8a2ede9b21ba310782892b095ed511145c3491839d0941c8e9417bdae65f7c7011f37829ef42cf394ed88231cf214a16f58e37588c6feff0242b64fe3dee94dff70b095fb6d5b3ce936583b8f3286b50c1a878f8d88e4c9b83a06627969ed74e2f4a080444f15cb55ef473ea05b38799d83c288e3b8cbf6987ba29c8cb3e6edb13a380283df2f290b7f7dc4fd64b54d083972b7e27a5d86c076e3425bc42c8186a51eb415a064a016a03e377dbad6fd85590c9a050fc528a4c72f54e7564f1cc0f93ededd117f87bf2c66ee340234949965a30714f505d44c3e3449699870e4bc3427d6d038126bb7b63362865768f3713a2004d4cabf195cb92b52207bb2e293ff6a0004ba1754a20fb8b6e3e99ebceb57ee7ebb73a94759571d22e9facb2421f8fc3011291c4efbec69933f4b7cd7c55a25d9338707302d0f34850dc3bc6ba3012ff79f08ec16b0d2858cc7d3ea5a5501dba03eb31909dccec32c190ee0f2cbccf59b4b373ad59575640453fc32e5cf1b6a2d0b49d738682d0b6119be1955df89a61189228162a8700714a9fca43754a7dbaad1069cb71042ff830e30f1aaa37a5d6d655aa3282ac7c3e043d8749d50e7297e50fb1cdd7d9d9e1541d458c8d5e97d76f414f786814eacc0d38fcbd9fa2129ec616362955f4727e19cbedc81b2c0a449a7c4e80764796cb66fc3bea9767cabc813651399503a3f1e9390981e3a09ab87d055692dadcc40e92a3ff77391f9b02558cfcc0d3cf414f04b78e8f9a3e992fb43f9bf90697585ed79c53d204feb48dadf0d0b33aaf97d6abdb135cf1498b53f0631e5493bd4510b3affe5c8ba8085c2df44da5541d5ed6f6cdf97d30d42eb8dcbd1c391327f8f69196a2036c614d53f7bef53c979ad23126a5bc3340506ae0921283d6c25e05028633e6f88aec2ff3ee8881183a56ebfeaf3834aa3a8054dd7182c3375fd788e7eb594f60dc52af9eae65a146b62213a4d4a314d579201777dcd76c662bcb4dc4e607a5de64c9872513fc01b900233eb3984ca7d7d042223bdcb809c7e04dd1c254641fbe4bb358896c4054bb87e47cbc88a9c55455e8530c16878152a499e71acc97a8e2d6746a3b097957e0df4cd21283f794cc87cc0c89d36d8578b2993d24902701d826f46f0b7f059ce0bce9dceff85eaa9f95467c21912f168c2f9ee6bf3c226b4a709449d9a09c55b41f257267176fde289b824908a8cf6a98c550a8cd158fb8c732aebb1970165292cf85f926963d49e523fc244f668982e4fa5d340626de723889e2adfd18028685a6b5a755dec1f9a1289deba9e37c49ed2662aeb77ceeded9fb573b58c9a21361044c0a4978da697b1cacac64522212fb9e0d6359e397d270c730c2e72b794af2e9fb825f60c89d02d7ff2b9fb73b132c4000958852638f1c214efdd04c45847acb104501a6647fcaf5f1892ede1772d767042381f90ff29a63c880381cc854592b7d7a3b38122335406e4bda7c58f2c0f5c919df4b7fb5346e9a6bd39f0a97da6d251757f07def1c0531390987cd85132753b542ec344941076002fd58e268ab8fd28fcff845a34eeb0a4cc6def72f2f91e433050a17e7174736859f95a58f3d6707a0ac85a41f5206ccdd70580c0f582a28e4d1c2e9104de3d789d13f373cbd949234dfe13a3b648214369e6137571943ecc65b05dd1d854a30f9199e31229e0a8539a484756b0fad29101715e6dc2688fc429bdf1bddd5dd6a00a322475eaa95713e8affa0cb12c0321054faaf500c50eefd089247c027ef06f2192839534d822bff44c1860dca9d762c6e520f7de45254f8315bf5c55b1da48f3893805e29fa7ba8f8240ee56bba7b405c10882e7f2579426143ddf087ffc8935ed67d12f2e3347db12cf257867691d5478ba8d178283ee76cbb103b3bd05dbaa54adc880df8a40f3debb1899f2a5a6c1985d9340c4577ed5c66a0277ac25545564036d80e7c64f7b7fd9fe46ee453bf590d1a1d42d6a42c30d4867c454675d85c75f5eccc420618dc2f6d89a69460f81a0055c36c5b7a5170014c85abf9cbedd73ab7eb773fb654ddcae305b9089339a1e908c9e8eeb3524e343d3c9dbd6843812d6778acab8223d8d9280000d101ba672ca52b5908c977656872d854f56e2f28578135f7c1f844dcca8ce8e8c4dbb0d69671277ab030e37b32a05f0822d8cef511657181305c9d700bc471e208c909e15ba67bfc365dd58c90f77ead9b7d636cd65a7a187ba7d8a329e0e0c8862a684b99eaaa52f378bdcf14bc0f79d47361218c10229d886e408ed13bda302c5a8c99bdbdb4f0111b25084dde4ced68ab9389e1d933608abfb2256e8ad668e80e2fc2af32f6cdd895434237b2d353094f275e64a4f58a67eefb1cadc4a381777f7f5f2afa08141ff749041079ae9106975e50fc6901533eeb494ab6a49b70b64692ccce6ae77d5b73bc5ff5b2fa4df08e32cf46784530ef8f60d7f2538f426a9bd89c8d3dc0a2d58f53e5c2ea76e4d75bd3f99e6963bfeb3ca9589fa3d65b692c0c915fae9b78e387534ab9e8123219bef44e08b80f32ffead568f19daf0c3233efe4dbee8cfa7d73f77d8ce99a4e4c086c2c29ba51116d75e7d42c5c0a3fdfabd15e1b2667cb0779b06beae908cfce79449085ed382c7ef3bd7f552286acef01e2b43109f474f2809f9b839697f7d5bb931f1a1be6ae6cba144a1633490768a807a311105958d9cc21f6035f11d5307c6c0640c125d902554670358e394ae4df96b307361c1dc94f5bb72ce8ff73df3125c93cb30800b82f3534b59a18d8eb73b0e32a317546ca2c47b0eade1f5ec6fc9cd302a67963e1522bb9ffda20dfa1afe73fe964bb1cd51bbf345e6f98d6b842f84d92790a02a9ed6c82524c900a44d075d44f61d5bf3a3dadaba5244ed026570447494a25da2f38651d2dbfa11bc6525fdd56d1a1fee5523809a52d3b6d7575b41d4c539a377ca04cd0a68ce96c50076f99d2541459dbe4db504605b100ae0fd328df501d29c34c567af7d2d1cdab7f50da01ac67e85d626eef1fb52aa984bdf6f319a38a25d090f1ab5ff5799fc0df9deec696171d0c4146a54295e0e584cb14defe8c29d500b16f4ad6e327980098c706f0ea141852bf255b2c44070ebe460123c329d3a48b09dd2cf307192bcd6bcbe386f0a4191cde378213028781847ffc92bd5d91ff067d51b63ac146076cf5be4b05f87451f82595626cd32d2a2ec80e4be4dfef230bd1386cf801f10f5537a223489b8e2af9f2f17cfc01dd97a1a220723d51b514aa8387635041950516b923d2b130c7814eeb975bcf280c91a9f921a6569c02908e45292a5c3570a5094d12415b0cf670c7cf860fbb1c71c1c723000e0236140096843d7bf31d601a2dbaa033d77ac901b1169610630a05eb8ba0cd589311de67d232cb5f8dcfc25ddc74a1d1e2a69d0898c80d7d94f944c5a82d0bc6a817a78592f41673024cd5bf90562930046658304fb01d5a33deb3f61244284cf32817930b0f3e7a7db3f1f70fa0fa322db89ec6252ba461c38afeeee7608be5fe6d9f10d331294eb55d09ef298c230ea317b56acc277355164c967783d8fcff0d2bd276a73f95caf1a61d1209c57b168200fdb87266896555f874d0417b01ded6509c46592f27a71615dac90b52864aa3b2987f40f23472416f9f5b01b28c26792a93a9d379a59636f007ad4191390b0a12b9d7ac4d7a879af50b28e8019ba4bb650ea05d3352d95b4b27b6913df75070d8f54e3d4330e39f42ee87723101ea7dfd55f8391734c4cf0425cc3eeb7d242a3410c3b90b3c718dc83d37d39091ed257dde19a9e4", 0x1000}], 0x7, &(0x7f0000003bc0)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x7ff, 0xc, 0x9, 0x3, 0x4, 0x6, 0xffff}}, @init={0x18, 0x84, 0x0, {0x80, 0x8001, 0xff01, 0x8000}}], 0x48, 0x44080}, {&(0x7f0000003c40)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003d80)=[{&(0x7f0000003c80)="e91be668fd8bf2a1c58ccdd38f751e9c7dd6d0c9a0912761ed4c9fd4c0777708ba7b467b505a68c10cb3d6be6f2f18972be493515531aac838a3d71f58ee2a65313b10c12313338754ab946c15116ecbf2693452d7b1c7d5b74a77533453a4172d3811a5c21c87674170f31d9ab7a618d6056720743d4c029995a3f2ccc90b8daa53608f97a7c60c74bfd79952bd51537241a54d7e271bf52dfe8bf72a4f8889c4a01f541a4e2412c063b776a550924e2e5b832c81b77b2e1288c519e1d76f19e5db4ea2059af71c410d48aa5cf6bc7f70df7547f58a4fdf6b77a2183917295b0981deeec505e9b23ef6ad6c705a34", 0xef}], 0x1, &(0x7f0000003e40)=[@dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, [], 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x2332, 0x8004, 0x6, 0x9, 0x43, 0x4, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xa0, 0x40}, {&(0x7f0000003f00)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000005180)=[{&(0x7f0000003f40)="37513d9c4adedb631cce6af3565f164150e12f18ad9882a80967e92effd4b83d57ceab429a7d1896bcad6f2857a920d28bcab20f98b151c038421042cc6007bb32d5cca7aac26e5a83e7557a92e6402d7d69fdbcfd52e2259494de58ee0eb4f58bcc809e93c145d92f39e6092f42f5151e88e3114ca177f2e0a5315e01f93d164423366fe0daecddeea5dd211473a7a381ce10453a724a45f4c8", 0x9a}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000000280)="addb8f4d704987564b509d009a2e6bd36e3be44a6c9a34f6e8a41c794792917dcce139902b5affbdee29a558679d5701ca0301d350d9c90df1290a64a3c14f674d3bf4fac145039f3da012d759f9f725b3906282bd697db16b8b3c7075bb26bf68e2a227ae97cff692f99d484d7f11e68ad7d37ffabf73a18933fbbf50ee986ccc60a7", 0x83}, {&(0x7f0000005040)="f496827724c004231350b04fa6a62785212409dad0bcfea1e30d1622f1c53ba6651718c2f2db1d87a5f6d6c93e59320d37a5dbd56838b1f11e15e44b9bc64ae5be1f780dfdc8e35259e48454d5c4a18fda981eb729cbada22b01d02a6dd901b7ce820f7b0cd24c186fade56ada8af1a1ba53052d53fa8fc7b98e67174c7add99b046bdf255c88099a812ad731635b1fb00ee2aadffa92a93d7bacb335142ad90209805c00868009a6f30e603573996eeb7642b621173978f58c947bc", 0xbc}, {&(0x7f0000005100)="16a03c36b21e3fcf6778eea856fe16c1fe31c8f5f944126f0c662df62ac858a2ebf8919477406296fe48c94dad4be0d7c5f37ef9f51450d5ca00299ab8add63371927b968809ab3060bc71d66c5c4860a107dd12", 0x54}], 0x5, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb00000000300000000000000084000000010000000004010000020000000000800001000008000000f10a000000080000", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001000000420001800c0000007f0000000400000003000000ffffffff01000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000006000000040000000000000020000000000000008400000002000000ffff040023c8000008000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000000000000500c1ffff0f004018000000000000008400000006000000fcff0000000000003f000000000000008400000007000000e000000200000000"], 0xf8, 0x10}, {&(0x7f0000005400)=@in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x718f}, 0x1c, &(0x7f0000005480)=[{&(0x7f0000005440)="2a001eed5ee834323c573c8e7d6a046761fe75d7e7d3f16f25d4a3ef5457ab", 0x1f}], 0x1, &(0x7f0000005980)=[@sndrcv={0x30, 0x84, 0x1, {0x10, 0x1000, 0x8200, 0x7, 0x8, 0x3, 0x4, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x8008, 0x9, 0x82f3}}, @prinfo={0x18, 0x84, 0x5, {0x50, 0xfffffffd}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x19c5, 0x0, 0x8000, 0x80, 0x2, 0x80, 0x50bb, 0x2, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x200, 0x22db3cd7f4880ddd, 0x8000, 0xfffffffa, 0x4, 0x5, 0x72, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @init={0x18, 0x84, 0x0, {0x200, 0x3, 0x1000, 0x200}}], 0x130, 0x2404c004}, {&(0x7f0000005600)=@in6={0xa, 0x4e22, 0x413, @local, 0x7}, 0x1c, &(0x7f00000056c0)=[{&(0x7f0000005640)="3908ddc8703b2870c8e258cf11cb726c3a74d5b9a6a86c61ea9f68fa49217f710e6d5cc6e4f187fb07e84a4eabc6dcc24dff260aa6ed83144a988b5cb5755b52f3f82a6b9183d1d6f220142de9d9462bcfd100df45ee0d15deef0acceba9c7a4a8", 0x61}], 0x1, &(0x7f0000005700)=[@authinfo={0x18, 0x84, 0x6, {0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x208, 0x8, 0x4, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0xa, 0x8, 0x4, r7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xc8, 0x10}], 0x6, 0x20000000) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1077.842269] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1077.855078] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1077.873975] CR0=0000000080050033 CR3=0000000093222000 CR4=00000000001426e0 [ 1077.902071] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1077.932557] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 22:48:22 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/kcm\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="63940c8265d499fb34f13d1100000000cc0d00000000000008a40af66153000091eba6ac1d21c25887729587ccb3761f56a5ad25298a37a9bce0c332596b1e6fbe0824509607d1e3898ebf8b750abd47c537ed7680dddd416136f41604179da533eb1468d83c8ffc307374cb7c6852cad7fcad0e1dc83f05dce2a68f877ddd557f466f9ad3a3b65b506e029a04a6a1ecde5b9713f78a418a647d17dfc1691819b539776ef928"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r4, 0x4, 0x0) r5 = userfaultfd(0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x46}) ioctl$UFFDIO_REGISTER(r5, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000040)=0x5) [ 1077.951306] *** Guest State *** [ 1077.955804] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1077.968252] *** Control State *** [ 1077.979309] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1077.987369] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1078.002343] EntryControls=0000d1ff ExitControls=002fefff [ 1078.013570] CR3 = 0x00000000fffbc000 [ 1078.018628] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1078.029095] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1078.041026] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1078.048556] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1078.062666] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1078.071022] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1078.075974] reason=80000021 qualification=0000000000000000 [ 1078.089904] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1078.092913] IDTVectoring: info=00000000 errcode=00000000 [ 1078.112852] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.116782] TSC Offset = 0xfffffdbc8cec0bf4 [ 1078.129694] EPT pointer = 0x000000009fe2801e [ 1078.136066] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.136154] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.136233] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.136302] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.136372] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1078.136454] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1078.136493] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1078.136583] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1078.136623] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1078.136661] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1078.136682] Interruptibility = 00000000 ActivityState = 00000000 [ 1078.136694] *** Host State *** [ 1078.136743] RIP = 0xffffffff8116426f RSP = 0xffff88805953f9d0 [ 1078.136852] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1078.136895] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1078.137203] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1078.137253] CR0=0000000080050033 CR3=0000000097f95000 CR4=00000000001426f0 [ 1078.137335] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1078.137432] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1078.137446] *** Control State *** [ 1078.137514] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1078.137532] EntryControls=0000d1ff ExitControls=002fefff [ 1078.137605] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1078.137643] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 22:48:23 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1078.137662] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1078.137681] reason=80000021 qualification=0000000000000000 [ 1078.137694] IDTVectoring: info=00000000 errcode=00000000 [ 1078.137700] TSC Offset = 0xfffffdbc18e3ff74 [ 1078.137716] EPT pointer = 0x0000000092eeb01e [ 1078.137801] Virtual processor ID = 0x0003 [ 1078.333756] Virtual processor ID = 0x0002 22:48:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x0, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:23 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x101002) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x2, 0x1, @stop_pts=0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x1, 0x5, 0x1, 'syz0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='vlan1\x00', 0x10) [ 1078.457659] *** Guest State *** [ 1078.474838] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1078.507375] *** Guest State *** [ 1078.515444] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1078.531404] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1078.540583] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1078.553780] CR3 = 0x00000000fffbc000 [ 1078.561297] CR3 = 0x00000000fffbc000 [ 1078.564781] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1078.569599] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1078.577804] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1078.586220] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1078.594315] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1078.599498] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1078.611280] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1078.618887] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1078.631442] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.637361] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.651297] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) pkey_alloc(0x0, 0x3) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, r1) [ 1078.662376] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.672895] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.679645] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.692865] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:23 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r1}) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf2580200cc545d44ebbbf0022c8a30287c314b9118417500b92849067359d2e746660540920d061d2ccc32b6c0f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea27978000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r1, @ANYBLOB="08000b000300000008001900", @ANYRES32=r2, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r4, @ANYBLOB], 0x70}}, 0x20000001) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0x200, 0x70bd26, 0x259fdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0x5}, {0x7, 0x2}, {0xd, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x20}}, @TCA_RATE={0x6, 0x5, {0x80, 0xd5}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4f}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x8, 0x2, [@TCA_U32_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x10) [ 1078.715130] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.723107] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.747418] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1078.767540] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1078.772259] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1078.795991] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:48:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) recvfrom(r1, &(0x7f0000000000), 0x0, 0x2100, &(0x7f0000000040)=@phonet={0x23, 0x5, 0xf7}, 0x80) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1078.819376] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1078.827694] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1078.827834] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1078.827893] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1078.827933] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1078.895295] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1078.913203] Interruptibility = 00000000 ActivityState = 00000000 [ 1078.914332] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1078.929808] *** Host State *** [ 1078.937073] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:48:23 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x24400) fcntl$setstatus(r0, 0x4, 0x0) 22:48:23 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{}, 0x1, 0x8, 0x7f}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r2 = dup2(0xffffffffffffffff, r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x70, &(0x7f0000000040)={r4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @local}}, [0xffff, 0x2, 0x1, 0xffffffff, 0x99, 0x1, 0x80000001, 0xffffffffffffff7f, 0x200, 0x6, 0x4, 0x7ff, 0x3, 0x4, 0x5]}, &(0x7f0000000540)=0x100) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x20000}, {0xa, 0x0, 0x0, @private0, 0x8}, r6}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r6, 0x3}}, 0x18) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1078.948225] RIP = 0xffffffff8116426f RSP = 0xffff88805b50f9d0 [ 1078.968503] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1078.978190] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1078.994320] Interruptibility = 00000000 ActivityState = 00000000 [ 1079.002702] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1079.016679] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1079.018874] *** Host State *** [ 1079.035124] RIP = 0xffffffff8116426f RSP = 0xffff88805df4f9d0 [ 1079.039281] CR0=0000000080050033 CR3=0000000092eb0000 CR4=00000000001426e0 [ 1079.042632] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1079.056512] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1079.063770] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1079.067184] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1079.080073] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1079.088667] CR0=0000000080050033 CR3=000000008c9e3000 CR4=00000000001426e0 [ 1079.093404] *** Control State *** [ 1079.101177] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1079.101987] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1079.108277] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1079.125408] *** Control State *** [ 1079.128888] EntryControls=0000d1ff ExitControls=002fefff [ 1079.128989] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1079.135556] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1079.154381] EntryControls=0000d1ff ExitControls=002fefff [ 1079.157683] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1079.160122] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1079.176894] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1079.177599] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1079.191783] reason=80000021 qualification=0000000000000000 [ 1079.194828] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 22:48:24 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ubi_ctrl\x00', 0x400, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) [ 1079.209126] IDTVectoring: info=00000000 errcode=00000000 [ 1079.213578] reason=80000021 qualification=0000000000000000 [ 1079.223944] TSC Offset = 0xfffffdbbd006a09d [ 1079.235872] EPT pointer = 0x000000009fe2801e [ 1079.246008] Virtual processor ID = 0x0002 [ 1079.247260] IDTVectoring: info=00000000 errcode=00000000 22:48:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1079.264261] TSC Offset = 0xfffffdbbc7e93ffa [ 1079.273092] EPT pointer = 0x00000000a839d01e [ 1079.292316] Virtual processor ID = 0x0003 22:48:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:24 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x2400) [ 1079.369963] *** Guest State *** [ 1079.373590] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1079.387367] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1079.396713] CR3 = 0x00000000fffbc000 [ 1079.405719] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1079.412809] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1079.423911] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1079.459544] *** Guest State *** [ 1079.467604] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1079.476755] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1079.495535] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.508041] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1079.518306] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.530703] CR3 = 0x00000000fffbc000 [ 1079.534615] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1079.546147] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.555826] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1079.565979] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.576355] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1079.587002] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.596482] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1079.608536] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1079.617988] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:48:24 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) [ 1079.619106] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.629690] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1079.651143] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.654720] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1079.673762] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1079.681487] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1079.692117] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.700199] Interruptibility = 00000000 ActivityState = 00000000 [ 1079.700214] *** Host State *** [ 1079.700302] RIP = 0xffffffff8116426f RSP = 0xffff88805b40f9d0 [ 1079.700393] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:48:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:24 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x5, 0x916, [0x0, 0x20000080, 0x20000196, 0x2000033c], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x98e) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/qat_adf_ctl\x00', 0x22000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000b80)={r2, r3, 0x9, 0xcd, &(0x7f0000000a80)="9d122ac3cbbe362aaa980edffe246dc8654213f3db18785489651b37fa71ba2e321204b4155fd2e1687b1d773c4c0d4b24fcfc7d1f2f65d57ac0573f617fb0b160797c0a7767239ca1f146f216460e2bd2715564b26de3f80fe5f15e71a5395dcf0a569c21e9e1756dec1ea7330558c8998e157de05dae8f0057dc94afebcfae0fc0f7dbef3d7b24bdd03e3f5d26b25241867cab7799eebc5522b8a2dc0bf530f8f89155dd82deff37a48063a9f6b05ce26ad7fdd74e40719ea6f3802607ffe59fb67adc31deb1e7342bcc39d2", 0x9, 0x5, 0x7, 0x6, 0x6, 0x3, 0x4, 'syz1\x00'}) [ 1079.733615] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1079.735417] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.754351] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1079.768538] CR0=0000000080050033 CR3=0000000092eb0000 CR4=00000000001426f0 [ 1079.781916] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1079.800866] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1079.812495] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1079.828752] QAT: Invalid ioctl 22:48:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x420081, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x40, @time={0x7ff, 0x1f}, 0x6, {0x5, 0x7f}, 0x6d, 0x0, 0x2}) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0xffffffffffffff72) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1079.845880] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1079.847308] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1079.878146] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1079.904111] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1079.906648] *** Control State *** [ 1079.929776] QAT: Invalid ioctl [ 1079.931025] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1079.941967] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 22:48:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x164, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe691}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, r3) keyctl$reject(0x13, r3, 0x5, 0x4, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0}}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000400)={&(0x7f00000002c0)=""/148, 0x94}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, {0xfffeffff}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1079.946821] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1079.959778] Interruptibility = 00000000 ActivityState = 00000000 [ 1079.979409] *** Host State *** [ 1079.995024] EntryControls=0000d1ff ExitControls=002fefff [ 1079.999987] RIP = 0xffffffff8116426f RSP = 0xffff88805decf9d0 [ 1080.008471] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1080.009462] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1080.041663] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 22:48:24 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0xd8, 0x1b, &(0x7f0000000040)="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"}) fcntl$setstatus(r0, 0x4, 0x0) [ 1080.046041] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1080.080395] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1080.086736] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1080.102790] CR0=0000000080050033 CR3=000000008c9e3000 CR4=00000000001426f0 [ 1080.126780] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1080.128547] reason=80000021 qualification=0000000000000000 [ 1080.153375] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1080.168790] IDTVectoring: info=00000000 errcode=00000000 [ 1080.177478] *** Control State *** [ 1080.180479] TSC Offset = 0xfffffdbb5343e6f2 [ 1080.195174] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1080.220112] EPT pointer = 0x00000000510a501e [ 1080.224519] Virtual processor ID = 0x0002 22:48:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r2 = fcntl$dupfd(r1, 0x406, r0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha224-arm64,cbc-camellia-aesni)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000000)={0xee50, 0x4, @value=0x6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1080.225606] EntryControls=0000d1ff ExitControls=002fefff 22:48:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:25 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1, 0x4, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}]}, 0x290) fcntl$setstatus(r0, 0x4, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="5d7e1a3aa6c52e452403d5732e25b0ab257cb524e14e4484d4bbcc0c8f95564c5da5607a399fdada8dce63ee6cd20e5c0ca100b3a903e4b6836956af97ffbca62f1ffb431ce4bbc44ca33dac4e2f01a901e096b2e8ce1cb9b19cb4cd3270022bd4c36d1c74b3a401af9173f76b5036c0916099f1244a3d1c4059adb1e749ec8e54f4c135823637222712ebfcc2ad3f5653bff57c12ac54a18d47760ebba47777d393d6ef9b747f360f886124252541a589048994ff97186b3ec7afc0ba44d2d75a397a7ce96b", 0xffffffffffffffb0) [ 1080.270204] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1080.297461] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1080.323564] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1080.356796] reason=80000021 qualification=0000000000000000 [ 1080.374389] IDTVectoring: info=00000000 errcode=00000000 [ 1080.389935] TSC Offset = 0xfffffdbb45b0d689 [ 1080.404203] *** Guest State *** [ 1080.407777] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1080.426099] EPT pointer = 0x000000008b45601e [ 1080.435192] Virtual processor ID = 0x0003 [ 1080.440664] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000), 0x4) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) [ 1080.472840] CR3 = 0x00000000fffbc000 [ 1080.482452] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1080.514122] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1080.532754] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1080.557241] *** Guest State *** [ 1080.557263] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1080.568460] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1080.598835] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1080.602538] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.623128] CR3 = 0x00000000fffbc000 [ 1080.635821] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.641289] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1080.644886] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.661273] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1080.662479] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.677808] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1080.682596] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.703708] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1080.706419] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1080.730184] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.735759] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1080.754024] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x54) [ 1080.762827] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1080.775307] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.785083] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1080.798302] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40000, 0x0) fcntl$getflags(r1, 0x3) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x87}, 'port0\x00', 0x43, 0x40805, 0x0, 0x5, 0x7, 0x1000, 0xf7, 0x0, 0xdf85d8306e470c36, 0x9}) socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) [ 1080.814647] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1080.822757] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1080.829356] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1080.851979] Interruptibility = 00000000 ActivityState = 00000000 [ 1080.867637] *** Host State *** [ 1080.869772] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1080.875583] RIP = 0xffffffff8116426f RSP = 0xffff88805b40f9d0 [ 1080.889517] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1080.895747] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1080.913227] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1080.916097] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1080.936956] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1080.953791] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1080.958891] CR0=0000000080050033 CR3=000000008ddc6000 CR4=00000000001426e0 [ 1080.975863] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1080.979637] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1080.997770] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1081.001273] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1081.023993] *** Control State *** [ 1081.024946] Interruptibility = 00000000 ActivityState = 00000000 [ 1081.030910] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1081.052619] *** Host State *** [ 1081.053577] EntryControls=0000d1ff ExitControls=002fefff 22:48:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1081.075078] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1081.078331] RIP = 0xffffffff8116426f RSP = 0xffff88806314f9d0 [ 1081.093055] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1081.107749] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1081.114673] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:48:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140d, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1081.124837] reason=80000021 qualification=0000000000000000 [ 1081.140798] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1081.144039] IDTVectoring: info=00000000 errcode=00000000 [ 1081.174505] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1081.181642] TSC Offset = 0xfffffdbac87dcbfc [ 1081.192769] CR0=0000000080050033 CR3=000000008c9e3000 CR4=00000000001426e0 [ 1081.196540] EPT pointer = 0x00000000a162801e [ 1081.207394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=11220 comm=syz-executor.4 [ 1081.215448] Virtual processor ID = 0x0002 [ 1081.227686] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1081.246850] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1081.260195] *** Control State *** [ 1081.267066] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1081.275509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=11225 comm=syz-executor.4 [ 1081.276969] EntryControls=0000d1ff ExitControls=002fefff [ 1081.308763] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x0, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1081.330022] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1081.336929] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1081.353422] reason=80000021 qualification=0000000000000000 [ 1081.359828] IDTVectoring: info=00000000 errcode=00000000 22:48:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1081.398272] *** Guest State *** [ 1081.402007] TSC Offset = 0xfffffdbaaf3b5f25 [ 1081.406421] EPT pointer = 0x000000008f96b01e [ 1081.420066] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1081.432829] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1081.443580] Virtual processor ID = 0x0003 22:48:26 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1081.459078] CR3 = 0x00000000fffbc000 [ 1081.473186] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1081.484602] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1081.495352] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1081.512336] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1081.531728] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.541611] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000001740)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="08000405", @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="a452eb767a357005bef3f55d358744eef239671087afaaba350227583d4d34074e2506964a4a6391a218c9ba3a6fa17f059a469d008f789457a4849b224560ebc6eece45be", 0x45}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3d9003c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xb0}}, {{&(0x7f0000000540)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="59ccbd92e26b293b0a20733a91b427ab5817a01ab0b36842dc3da02d4919cd0bec5e380e7e71e6e7ce7560a22b9302099278d06647185f26c5dc9ddabaf35b8e81d744a29c9b8113fb4fc7cb4c37ef5d6f939c8449308fbc823eda4214ec773b874713784238cc4be7985f6829cee5291aebefc4a54f21f536b64efb700d8840ff1f3b12a7db6ba85ebc8efeb62b9a57b0e9f9acdd4d2414bda7674ecf8c447dbf1a4d344df5dd5041e0fe46adf0e22ec30cf20d6e4496e882150feabe10cd", 0xbf}], 0x2, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x38}}], 0x2, 0x811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000001780)={0x8}, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000000c0)) bind$alg(r0, &(0x7f00000017c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ni\x00'}, 0x58) [ 1081.569466] *** Guest State *** [ 1081.575972] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1081.585600] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.594608] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.603764] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1081.613926] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.623643] CR3 = 0x00000000fffbc000 [ 1081.627484] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1081.634492] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1081.643290] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1081.649439] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1081.659870] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1081.667539] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1081.676850] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1081.685807] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.695273] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1081.704205] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.713184] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1081.720629] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1081.728415] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.738093] Interruptibility = 00000000 ActivityState = 00000000 [ 1081.745222] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.754045] *** Host State *** [ 1081.757361] RIP = 0xffffffff8116426f RSP = 0xffff88805dd879d0 [ 1081.764637] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1081.773661] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1081.780963] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1081.794407] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1081.802946] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1081.813100] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1081.819698] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1081.829365] CR0=0000000080050033 CR3=000000004fa12000 CR4=00000000001426e0 [ 1081.837705] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1081.860258] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1081.868051] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1081.877565] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1081.886945] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1081.893877] Interruptibility = 00000000 ActivityState = 00000000 [ 1081.900988] *** Control State *** [ 1081.904577] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1081.913146] *** Host State *** 22:48:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x80) fstat(0xffffffffffffffff, &(0x7f0000000280)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1081.916485] RIP = 0xffffffff8116426f RSP = 0xffff88805b40f9d0 [ 1081.924135] EntryControls=0000d1ff ExitControls=002fefff [ 1081.929882] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1081.937942] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1081.946076] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1081.954923] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1081.965647] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1081.973537] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1081.981839] CR0=0000000080050033 CR3=0000000091784000 CR4=00000000001426e0 [ 1081.989047] reason=80000021 qualification=0000000000000000 [ 1081.997262] IDTVectoring: info=00000000 errcode=00000000 [ 1082.003852] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1082.011411] TSC Offset = 0xfffffdba3b122c92 [ 1082.016067] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1082.023519] *** Control State *** [ 1082.027087] EPT pointer = 0x000000009543901e [ 1082.027979] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1082.039112] EntryControls=0000d1ff ExitControls=002fefff [ 1082.045183] Virtual processor ID = 0x0002 [ 1082.045821] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1082.058240] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 22:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x0, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc00, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1082.088108] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1082.115532] reason=80000021 qualification=0000000000000000 [ 1082.131304] IDTVectoring: info=00000000 errcode=00000000 [ 1082.154976] TSC Offset = 0xfffffdba235a7de6 [ 1082.167956] EPT pointer = 0x000000009533f01e [ 1082.183286] *** Guest State *** [ 1082.187457] Virtual processor ID = 0x0003 [ 1082.193147] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="dc2fb1d752f7c7f7cac67631bd6354b3f8a361bed346479c7ec47fd4c9eed564f0169567ef77f1af885108164a3e152af7a1b177576356cd925b73d99b39f1f79119e0f2adad175b72362e77db049e932571c9f7589a2daeb6e97bb143058a6a23164ea27117cb0999b9ee4994ca86a78567c4c0a248e0734afbd1e3647d199441d48872463b11ae6d92b4fe3e323198d51a7791852f147f8a39aec5275396dd36997c5783e38d8fc71fff05f74c58da5cb8579d7c2381b17276db8a47e416ef5d88a59182a837e7c1ce7e07000cc5efdb8d866bdeb2f7f6", 0xd8) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1082.250238] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1082.272995] CR3 = 0x00000000fffbc000 [ 1082.285315] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1082.297577] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1082.313789] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1082.325476] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1082.335625] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.358276] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.379697] *** Guest State *** [ 1082.387964] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) userfaultfd(0x800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1082.408820] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.429555] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1082.449364] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.465150] CR3 = 0x00000000fffbc000 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) sendmmsg(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2, 0x4, 0x0, 0x4}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="38ff6df2fac3a3b630b7838d14197405b4d4faf57814bd64cf6cd661a82af24df1ab91b19a4b9dc80f0c3c1df3f65257924675490d5cd17c4efd1fa966cdde3372382fc4ea73c0d7934c1147df000d5607f817d98330cb83eac5278535cca3a33424d3f929782e57d712458ec58fd6505afc4fed66b2fedc3f66bd8683e3fc4064b25d34b4759f25c6f197dbc94b5faf2dc2e322f8664376537a2cbf3e8049cbb97c94fc87527d5ab4a579a439f4655efcc26e7c", 0xb4}, {&(0x7f0000000080)="fd2a0bf17bd479c9d67dc7c51f76063cc971cdccf954ba5e0b4e712d3b1ffe5d26fd95c5ed15d48ae7720a92dbf9f9e40b94d8d565ab3de1", 0x38}], 0x2, &(0x7f0000000340)=[{0xd8, 0x102, 0x0, "92f63f89abd636c6536755a5f505d665862f8c152f1eca4dba6badfb7df9bfd17dc8b9ad785bb34c5a05004e3156367119c7b2e2c127188ac38f77985e44333d34678189e727c065c02749e05993830107cf2b03510fb79721d732068240bfba04abe92d69e1d1dccaf831a0afa33678d12e0e583a229b9b8ffa6171cc34d859595df7df6313ae09fbdf4f8a618f6ae86015d4a686e5a7fab1b0d333844bda087d914703dc5ab37e9557f6deb4da8466d4dfa9f01610530b360ae97cc578aa3041"}, {0xc0, 0x88, 0x1, "9c81cc061c5ee0c6db4f6bb1f9af73b1329c4b0155c724fb2affb4a6feb1541cb8ce862c123c4631109dadb437cbd6ef1f78fe93fcb5b7f2daa124990ab551cbeb8b0b4eead2196765ea359b8f9490136f7e0c3092a7387874e17f17bb68dcbb41661cb7b15cd79527e2d825fd24b418d36f353cb65ef228c2b61551cc0dba0b16feffdbb0d25bc8b94d96d5692c631a6d8207f0cbb540cf98f64cd35b4e528eb693975933c0b980e422e2f58e4199"}, {0x50, 0x105, 0xbf51, "639f069d8ec02a2ab0eca46d2871707f8549dc6f33c85d481bd24d046a705967d244fde57b634ce75e85895edd608a7f01801d1e64e9a6280a"}], 0x1e8}}, {{&(0x7f0000000180)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)="0a8a0880809bba8846e17917e0db206d2305af025cc292230f03e0501e7565490e66966104f4e6de4cf71be97504cf", 0x2f}, {&(0x7f0000000580)="0675ddf5c2c50d250032917f", 0xc}, {&(0x7f00000005c0)="b1f2f95ab1796156289cd108e05cbc67608418c150e02c85603cd759055ddf69d2c68f9ef6aaa5af017e75e16571812f7cf04198cee22702dcd20a09b98ded391a721dbaebd7af2b28fc74319337d3e364c06da711e4738f835d29d182091073586d76fb4255feb7c0998ec6fb4d0caf5368d7fb7a66f840d62e509341e7965e38c9e7f178a69bc7225f31c8da3764e2c1fd5f9232758b94e9d631a6ce293502b7c9651747d69e1321087a3f044a80253a1e519348b2f33fae3c55773320ccc19b6278", 0xc3}, {&(0x7f00000006c0)="3f9f84da187bc47eea63e2e461dd787a1e9cf4ea74f62f6581fd8dee101831681809b6fe9101f2a9e995e96e14f24bf8c3390075b1416be38423fc73db5587e5d8d66130363d7bfb41e16de133b7940af4276f2c388cb77dde896d7ce2f8872b30", 0x61}], 0x4, &(0x7f0000000780)=[{0xc8, 0x102, 0x1, "9920a95a56ff2fcafe1e40075b8e2c87cadf7fd5b7139de1f8d805eccc1628d5adc578d3c432b2c5fc7fc3de324f93870e77cea92a13f1b9e4f2871ca3eb14af73b7377ecf7c016a823db4296704c4ae90a149d165d45304ac1557cb9aef28d9193a5cb018ee6cecd3f13663be72d0ba5aebc22269520394c13cac3df3827fa5e7dfcdeae67c56cccdbade177f6ede0b142dd5d5353d7deedc3b22248fc4283c31b86b140dbd3eb782620daa8d0d944e81e5a2"}], 0xc8}}, {{&(0x7f0000000880)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)="d50ae26536d388621ed1d6fed8254de2d0cd997caad524c37f77315e8a476dc9257de45904ce185fe394435bab06cbe9ee62ce721d50d6a0870d13ac24a0e4396fd9a58aab3b3479877961b0544760c1cc2c829a786ca1764075", 0x5a}, {&(0x7f0000000980)="964d0ed16c224990eda4d5e9a51c5d609bb6dec571d94f0e1ba070963b9322b9e723624a10e3683bfc2fe5026cf717c45c5ae332890b5a196638fc445e66dc036c301aa89d9390", 0x47}, {&(0x7f0000000a00)="a370dd0c919a4f713eb7a913b0c96685ad8d200024a7d49b242c1ae29ece7b45809223869e", 0x25}, {&(0x7f0000000a40)="aa6a7ec2fb", 0x5}, {&(0x7f0000000a80)="847443511ada6a3280566a59720d6dab0485d1bfd673995aee76b6a0e2cc7f8e733f8518efe645cfa8eca0c7c30d798c663e1a3fe709a05013bfed51b90449f591dc5dd5207ffe606b3364164c6fea846018f6aa522b4ce3d0427c954698a353f3775e58c2450ee9af4bccdb4990b944c1147e3c782e212dd249870b0ea2b5f2330b886c0a9aea30ced5bf787b", 0x8d}], 0x5}}, {{&(0x7f0000000bc0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)="f30822664ed40b2721189e410998127d06e443358bcda922f210004255a04542980f98d43389d0", 0x27}], 0x1, &(0x7f0000000cc0)=[{0x48, 0x1, 0x7ff, "2c0f5d841c0bc8bf462f67730f8d5b394151d5e496861b88668d57d9289d2bb860521c80e78506eab7b3295a6d77a658724c087926ee53f0"}, {0xf0, 0x108, 0x7, "c58ece03d1374405fbfbbbded38058897dd52d3e33491650cfdb3f7d987ddf2b5909264a034179a7fbb38630e3de6ad3dc7c934693d39365d43186ef3072e7a92b90fe967ece4a3e7843224520c1de07d3e6744fdca7f87ead4db2adb110312ee1bbd0f09cf644994ec0ec20c6b831d151db11787c03dc2bed41e12b181004e1874430e7cc019b6f3c23508275ec8e58e06b5f8b34b83dce81f7d73bc531684f82cc1e6a2af8fbe1ef233419d612dabccf17b1e47bc479eacc444bcd4dba0331fecc7871b095aff3819c98a5eafdad60a9a41a691a9a2c6979f860b46245de"}, {0x108, 0x3a, 0x800, "c90dc2f3f375d6670be850fa9b1b65579c5da9c56a63ccd581d28579ca740be06a60ab68ecbbc9fbff1d79d4d896b39fe082435d641b17249f7debf32a009941c42b259ddf5001dec16e305b5b45c92fccb17602f071ae2c98f0fd515660b9c91473a5b539c305fb3016d438a3b086b0cd4aa5929ede467fcf3e535d98617acd4020f0964a1ec8009f9889970c5c5c3a788705d271b85a7b628c3cf02ee5f28ad6bcf56eda0106429052ff66b1bcab0dd5e38ee339aa0cb8425b7635d3141a9b2a2f3d90c112c8da071a75c5d62b80dc79dbea901735fd39dfb7c44c85f86ff93d0058436f3c98b7a93f8654276edf4e06bc117f"}, {0x88, 0x0, 0x0, "9c5eae896e6d00764d768ae5775fff241f9b8097b7e5e6047519bcac2e9393abb4398a262df63d9b74bb9d04436c9df6787f9da38cbbc571d8d4c4be64a93c4ba540fb19c3943348b29e4027e3784a0329366d7c8b78ba603886e4ab26e384b6b241d62524c20b69989d7f88af1743d092"}, {0xe0, 0x3a, 0x9, "675bda339e6b64834ea22f10730c85b31954a32d73a1f765bdff1cf054441204e0123092c0e28d1e57f1d8afed4ca00f351fa1c4606be2bb48a49e996b009dc05e9d3edff4def12e96c196b61f1f5c94ea54f5e321c6c74c3b606c717de2b877fe5f0e139717a1a3320cbce2f24775b5e294f03ac6da9b114e0539cab36c8083aadbf6904bbf61c4f24b6a60fbd853446667d2421748d724dff1bdefcc94b8a182e1594e22583971927273b4fdb55a948126195fd7f6828645295ff40a13e56c32b337ed398f1d699a51ed646a"}, {0x70, 0x117, 0x4, "a341f8214368c9ff0322212454b0f8f3442f707fed90c7436f35a6c1ffe90d4f9f7fea8e25d73f196f0502798b4eb1fd7edc86e54044c39127473c3370e63e4ce6c7ab064b2898ac039f0d7fa4c6b565228b5bdf6cf132058134"}], 0x418}}, {{&(0x7f0000001100)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001180)="900d8676027e297f5661fddd629f6631b4959740ef65a5ac3cd3296075fd9fef9ae748ec565dee07e73cd2ab8a397e815100966b6b70d18f28a9057e753c6ea901f2d3c2d62d51b05706bcdf3bd0f6fdd383118db33c58954453d684146cb31aafbb9c3ae75cb37306616fb3d0b8a79cd21647b784ceffd2145c2389a9b136951159ceab12cfd13482df88999b8cc1bc25f387dba5cc8795da7a19e0652b793a6af31f0b40be9259e311aef89791df53e57b812048744b788afb14568463a984f09dc8396cb4239875cd7528299a93dd1eb2719f7004cd4ea10b974c56181988508cf078", 0xe4}, {&(0x7f0000001280)="3965aa5cde4ffdc6d9d3e7175782cdfc22e2ae03153fa57817b0a718c124299ec6d46257644ce3", 0x27}, {&(0x7f00000012c0)="4025c947959c599e4fe678a5f4a933990f70cadf5aca28fade0339d482835308ef8b7560f75554c5e659c3ffce4c82626330282c4efdf0e61a81b46bc1dd7ede21939822420f0cf8fba5564a3b6eb75b70c1f082912e872b06e98ca434c8470503b07f5bae23ffaf67cde130b2", 0x6d}, {&(0x7f0000001340)="31255b4e9b70a3042119067cf026ec77a64a0971ec6ae2828719524c080c446701ea1826652d4c8826e479db3d7ebea1d1c561228996b739d5cf9ec52c4981d6c6d4cf43a1aebd0bfd6fc9533abd3e0616b628106336aadd9f2c6a333d80ff0fd1e95fd9ff2236e9f2f9fbb6e25a08e63b5a13ad2a70cb7a5ecb9f4719fcc9fbf40b6c077ac14152522ef1a607e9e74c566917ab31783d45bff17d", 0x9b}], 0x4, &(0x7f0000001440)=[{0x78, 0x10b, 0x4a700, "85d07bd543e0b11da6b1f0a6e54e626c2e86f2156e2f3b165d78e021c6c6b532d3ceb79fd1a7851cfd3c8540fdcc1185a56e8b659796164cc1656ef6d907f5b16d224df3b1b055283d6a5a55665f8a4323632f4df007dd4ab60a3c8112581aaf34c31f319d90cb20"}, {0x38, 0x107, 0x4, "de4b692036c39cc2e93f6755234305dfc7788f9d557ffa729f5eabf9e68f582d793d0cadbdd5fc9c"}, {0x70, 0x108, 0x1ff, "9e4373c31a2f87187a8acfcf98d5c1c8f7e197b9896538c8f7f4f9a6f397ad8f2b6195fdb003d35f26301dc5fb05469ad2408453dd29566231276ce2457c1553e153f24b3c67a8b254508cd985158fd6cccec9ee0abbe71b17"}, {0x38, 0x10a, 0x10000, "cd708c3fd6f0d65d6b4ec3f6d9560c5b4c85354c2846016d0a6df0fc38384027e436056b2d4983"}, {0xf0, 0x107, 0x9, "a549af0b1e13aeb02fdf2bb3a65fb5546f7efb9fe50632bdbe900b1f5138495e8f3be10e972c52bac250ff339f7bf09545122667329727505acadfc91011b3cebd0b4f2069794972e38b6246d095be8f96b19191fa61508968122e8306267889eb4f2dafd65d3029bd675be0d5ab04e78ab952c88b644ebd79ccf50fe678e433350309a1764775e3de33b461c41a41a3b885d1043960a7ddb0d3f559ad1d23957dae9da5eebe97c167692468f7be28acc71c8e7aa843a91a4c59f58f11fe49ab30fcec128e92ef3b3ea0390279a68e37251b5898cf78ec066fe929d7"}], 0x248}}], 0x5, 0x4000c880) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1082.489011] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1082.497695] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.518882] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1082.537275] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1082.552265] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1082.559083] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1082.581189] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1082.600545] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1082.615865] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.624543] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1082.634168] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.643778] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1082.651282] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.660555] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1082.675945] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.700005] Interruptibility = 00000000 ActivityState = 00000000 [ 1082.706364] *** Host State *** [ 1082.709611] RIP = 0xffffffff8116426f RSP = 0xffff88806709f9d0 [ 1082.716413] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1082.726044] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1082.735369] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1082.742998] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000080)={0x6, 0x3, 0x10000, 0xffffffc1, 0x4, 0x4}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x20000}, {0xa, 0x0, 0x0, @private0}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x30, 0x0, [0x9, 0x3, 0x5af, 0x3f, 0x7f, 0x0, 0x7, 0x2, 0x2, 0x22d, 0xd1, 0xa0, 0xc8d, 0x10001, 0x8, 0x6]}, {0x4, 0x0, [0x5, 0x29159035, 0xffffff80, 0x3, 0x7ff, 0xffff8001, 0xd2, 0x246ec0, 0x4, 0xb8, 0x2, 0x9, 0x7, 0x7fff, 0x2, 0x7]}, {0x4, 0x0, [0x4, 0x7ff, 0x4, 0x4, 0x8, 0x6, 0x1ff, 0x7a, 0x800, 0x15, 0x1000, 0xff, 0x400, 0x6, 0xfffffff8, 0x4]}, {0x0, 0x0, [0x5, 0x5, 0x6, 0x3, 0x7, 0x5, 0x3, 0xabfb, 0x7, 0xffffffff, 0x4, 0x0, 0x6, 0x800, 0x7, 0x26e9d407]}, {0x8, 0x0, [0x2, 0x800, 0x7fff, 0x9, 0x94, 0x40000000, 0x4, 0x5, 0x100, 0x241, 0x7, 0x5, 0xc2, 0x1, 0x40, 0x20]}], r5, 0x1, 0x1, 0x168}}, 0x20) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1082.751799] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1082.760253] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1082.768429] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1082.777012] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1082.783224] CR0=0000000080050033 CR3=0000000092265000 CR4=00000000001426f0 [ 1082.790503] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1082.797806] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1082.805990] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1082.816019] Interruptibility = 00000000 ActivityState = 00000000 [ 1082.823809] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1082.830697] *** Host State *** [ 1082.834146] RIP = 0xffffffff8116426f RSP = 0xffff888051fef9d0 [ 1082.842133] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1082.849147] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1082.852178] *** Control State *** [ 1082.860036] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1082.866535] CR0=0000000080050033 CR3=0000000094a85000 CR4=00000000001426e0 [ 1082.875983] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1082.883438] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1082.884058] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1082.889671] *** Control State *** [ 1082.909486] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1082.929999] EntryControls=0000d1ff ExitControls=002fefff [ 1082.935503] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1082.943573] EntryControls=0000d1ff ExitControls=002fefff [ 1082.949021] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x52) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600), &(0x7f00000005c0)=0xc) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x3ff, 0x1, 0xcf, 0x6}, {0xfdbc, 0x4c, 0x42, 0x10001}, {0x87, 0x81, 0x48, 0x140}, {0x5, 0x0, 0x0, 0x6afd}, {0x3, 0xfa, 0xe8, 0xfffffcdd}]}, 0x10) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r3}) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000140)={0x3f, 0xa0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x183bc0, 0x0) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000540)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x4, &(0x7f0000000400)=[{&(0x7f0000000280)="ed9006f0748994084947ab555850423f0199020b051fed15c873e6dfc775548a12e45ce575c55eecf7f3ded409d5b3e90cb6d09c90", 0x35, 0x4}, {&(0x7f00000002c0)="c66f48a0b0c195705d7766304b9e1dfc71c5a4d387e37e41c72008d8f89a8802ecc1bcd46e4c180f", 0x28, 0x10001}, {&(0x7f0000000300)="750f65b0b771ff6d7e2ebad80ba1883ad8b57dd1709c009996edea5dec3b2f3b399d6c25d3bf1a89e1341d4d7b1a32cdf3043f4f403624f0d4d792089c", 0x3d, 0x4}, {&(0x7f0000000340)="8ffdc4d3b676e021dd29b985161c4e680bb680092b887da705e127d23a91c907a500d7bb909cfa9d3aecfd5e07b34ebdc8cc7e7c91287d8f1c798d795b07fdde95d71894d8b8d875b764016520f3c17b1cc5f884859e8bf1119fe62e8862933ba0ce0981f8b0aa020ff4e12e84ad79c62f8cc083cafefb8f4d78e6266dbff5392a96a28031abe35f1e5648ee", 0x8c, 0x4a4}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r7, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303037362c71756965743163656465786167653d6d6163636505746575726f2c66736e616d653d7d2d262a252c726f6f74636f6e746578343d726f6f742c00"]) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1082.961642] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1082.968450] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1082.976179] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1082.985985] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1082.996535] reason=80000021 qualification=0000000000000000 [ 1083.003981] reason=80000021 qualification=0000000000000000 [ 1083.010819] IDTVectoring: info=00000000 errcode=00000000 [ 1083.016428] IDTVectoring: info=00000000 errcode=00000000 [ 1083.022979] TSC Offset = 0xfffffdb9b5cd0c14 [ 1083.030471] EPT pointer = 0x000000008c3ff01e [ 1083.034936] Virtual processor ID = 0x0003 [ 1083.043727] TSC Offset = 0xfffffdb9d0a685aa [ 1083.052685] hfs: unable to parse mount options 22:48:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-arm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1083.086395] EPT pointer = 0x000000008894f01e 22:48:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1083.112199] Virtual processor ID = 0x0002 22:48:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x0, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1083.187197] *** Guest State *** [ 1083.197345] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x0, 0x5, 0x3, 0x2}}) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000000)={0x905, 0x9e1, 0x7}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1083.245952] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1083.271039] *** Guest State *** [ 1083.274972] CR3 = 0x00000000fffbc000 [ 1083.277864] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1083.287651] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1083.287705] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1083.287728] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1083.287748] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1083.287817] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.287991] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.288041] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.288119] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.288160] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.288180] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1083.288220] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1083.288239] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1083.288300] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1083.328043] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0xff36}) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000000)=0x830) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1083.408977] CR3 = 0x00000000fffbc000 [ 1083.420632] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1083.427121] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1083.434329] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1083.452215] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1083.470370] Interruptibility = 00000000 ActivityState = 00000000 [ 1083.470384] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1083.487432] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x5f) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x28) [ 1083.513746] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.517461] *** Host State *** [ 1083.528685] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.551040] RIP = 0xffffffff8116426f RSP = 0xffff888089fb79d0 [ 1083.553240] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.571846] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.577340] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1083.583008] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1083.586538] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1083.596161] GDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:28 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x850) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400000, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) fcntl$setstatus(r0, 0x4, 0x45c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000440)) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000380)) [ 1083.614134] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1083.623384] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1083.632638] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1083.653140] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 22:48:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fstat(r0, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1083.659094] CR0=0000000080050033 CR3=00000000922b5000 CR4=00000000001426f0 [ 1083.661916] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1083.695456] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1083.700095] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1083.719572] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1083.738819] *** Control State *** [ 1083.744220] Interruptibility = 00000000 ActivityState = 00000000 [ 1083.748539] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1083.758463] *** Host State *** 22:48:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1083.777564] RIP = 0xffffffff8116426f RSP = 0xffff8880679179d0 [ 1083.781039] EntryControls=0000d1ff ExitControls=002fefff [ 1083.793767] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1083.796473] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1083.818069] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1083.819175] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1083.840655] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1083.852748] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1083.859547] reason=80000021 qualification=0000000000000000 [ 1083.866294] CR0=0000000080050033 CR3=00000000a8c7b000 CR4=00000000001426e0 [ 1083.872850] IDTVectoring: info=00000000 errcode=00000000 [ 1083.883351] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1083.889786] TSC Offset = 0xfffffdb947ee5879 [ 1083.898474] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1083.903224] EPT pointer = 0x000000008de1c01e [ 1083.912984] *** Control State *** [ 1083.919846] Virtual processor ID = 0x0002 22:48:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480400, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x3e) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1083.920645] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:28 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x400800) fcntl$setstatus(r0, 0x4, 0x0) 22:48:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1083.989650] EntryControls=0000d1ff ExitControls=002fefff [ 1084.012569] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1084.055586] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1084.079737] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1084.086322] reason=80000021 qualification=0000000000000000 22:48:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x0, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x4, {0x4, 0xffffffe0, 0x0, {0x2, 0x80000000, 0x9, 0x6, 0x6, 0x5, 0x0, 0x5, 0x0, 0xffff, 0x7fffffff, r2, r3, 0x219, 0x80000001}}}, 0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x70, &(0x7f0000000040)={r4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r4, 0x8, "548fcc397ac2b726"}, &(0x7f0000000080)=0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) lseek(r6, 0x266, 0x1) [ 1084.116220] IDTVectoring: info=00000000 errcode=00000000 [ 1084.117754] *** Guest State *** [ 1084.121744] TSC Offset = 0xfffffdb93b65166b [ 1084.121752] EPT pointer = 0x0000000094e6601e [ 1084.121759] Virtual processor ID = 0x0003 22:48:29 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) clock_settime(0x3, &(0x7f0000000240)={0x0, 0x3938700}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) dup2(r1, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x1, 0x0) socket$isdn(0x22, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000200)={&(0x7f0000000040)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/165, 0xa5}], 0x2}, 0x40000041) [ 1084.161972] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1084.194470] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1084.229537] CR3 = 0x00000000fffbc000 [ 1084.233359] *** Guest State *** [ 1084.233382] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1084.233451] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1084.233470] CR3 = 0x00000000fffbc000 [ 1084.233490] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1084.233510] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1084.233552] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1084.233574] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1084.233781] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.233920] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.233982] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.234121] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.234282] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.234329] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1084.254830] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1084.281030] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1084.331417] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1084.393599] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1084.396057] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1084.409066] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1084.414249] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1084.431379] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:29 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) mq_notify(r0, &(0x7f0000000040)={0x0, 0x4, 0x4, @tid=r1}) [ 1084.436943] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1084.469010] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1084.473107] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.485675] Interruptibility = 00000000 ActivityState = 00000000 [ 1084.499902] *** Host State *** [ 1084.507766] RIP = 0xffffffff8116426f RSP = 0xffff88808c09f9d0 [ 1084.520272] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.521401] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1084.548813] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.550654] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1084.569607] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1084.581562] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1084.593542] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1084.595122] CR0=0000000080050033 CR3=00000000a4e6b000 CR4=00000000001426f0 [ 1084.613266] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1084.615970] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1084.633237] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1084.634878] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1084.654448] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1084.655998] *** Control State *** 22:48:29 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000080)={{0xa, 0x3, 0x1, 0x8, 'syz0\x00', 0x9}, 0x0, [0x241e1c45, 0x8, 0x4, 0x4, 0x6, 0x5, 0x200, 0xa79, 0x0, 0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x3, 0x2, 0x4aa, 0x9, 0x1000, 0x8, 0x0, 0x711c, 0xc2, 0x80000001, 0x10000, 0x5, 0xfffffffffffffffb, 0x6, 0x1000, 0xe77, 0x1, 0x9, 0x8, 0x3f, 0x8000, 0xb6dd, 0x588, 0x5, 0x12, 0x1, 0x6, 0x40, 0x9, 0x80000000, 0x3, 0xc7d3, 0x4, 0x800, 0x1, 0x4, 0x2858, 0x4, 0x2, 0x1, 0x2000000000000, 0xbe, 0x7fff, 0x6, 0xffffffff, 0x10001, 0x0, 0x7fffffff, 0x401, 0x200, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x7, 0x6, 0x1ff, 0x2, 0x8, 0x1f, 0x10001, 0x4, 0x1000, 0x0, 0xd7, 0x0, 0x40, 0x3eb5d860, 0xfffffffffffffffb, 0x2, 0x8, 0x0, 0x3ff, 0x100000000, 0x1ff, 0x1f, 0x63a1, 0x0, 0x1000, 0x5, 0x4, 0xa91, 0x6, 0x7, 0x4, 0x8, 0x205, 0x400, 0x5e3a, 0x4, 0x1f, 0x101, 0x3, 0x8001, 0x8, 0x2, 0x7fffffff, 0x443, 0x1, 0x3f, 0x2, 0x9, 0x6, 0x80000001, 0x9, 0x3, 0x2, 0x1, 0x401, 0x0, 0x7f, 0x8, 0x10001]}) fcntl$setstatus(r0, 0x4, 0x0) [ 1084.674589] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1084.683334] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1084.698825] EntryControls=0000d1ff ExitControls=002fefff [ 1084.706960] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1084.711355] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1084.736577] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1084.740003] Interruptibility = 00000000 ActivityState = 00000000 [ 1084.751589] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1084.766227] reason=80000021 qualification=0000000000000000 [ 1084.778958] *** Host State *** [ 1084.781614] IDTVectoring: info=00000000 errcode=00000000 [ 1084.787159] RIP = 0xffffffff8116426f RSP = 0xffff88806511f9d0 [ 1084.788037] TSC Offset = 0xfffffdb8b6e6ba31 [ 1084.797521] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1084.812557] EPT pointer = 0x0000000091e2301e [ 1084.822336] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1084.822768] Virtual processor ID = 0x0003 [ 1084.844409] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1084.871154] CR0=0000000080050033 CR3=0000000085ca7000 CR4=00000000001426f0 22:48:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1084.891357] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1084.911997] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 22:48:29 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x7c3580) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x34) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x7, 0x6}, 0xc) [ 1084.938880] *** Control State *** [ 1084.949500] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1084.968033] EntryControls=0000d1ff ExitControls=002fefff [ 1084.981032] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1084.997169] *** Guest State *** [ 1085.004937] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000040)={&(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001380)=""/4112, 0x1010}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000001280)={0x0, 0x1000, 0x4, 0x3, 0x4, 0x0, 0x0, 0x5, 0x4f, 0x0, 0x2, 0x2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:29 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x4a8401) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$setstatus(r0, 0x4, 0x800) [ 1085.038489] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1085.078202] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1085.092742] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1085.116236] reason=80000021 qualification=0000000000000000 [ 1085.129039] CR3 = 0x00000000fffbc000 22:48:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000)) [ 1085.145898] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1085.162628] IDTVectoring: info=00000000 errcode=00000000 [ 1085.175557] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1085.183285] TSC Offset = 0xfffffdb8c8feb723 22:48:30 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x2, 0x1, {0x3, 0x2, 0x2, 0x2}, 0x4}) fcntl$setstatus(r0, 0x4, 0x0) [ 1085.192618] EPT pointer = 0x000000008c21e01e [ 1085.198289] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1085.213217] Virtual processor ID = 0x0002 [ 1085.226963] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:30 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1085.269439] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.295686] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.327757] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1085.381957] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.393909] *** Guest State *** [ 1085.416480] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1085.437164] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.456059] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1085.468694] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1085.493260] CR3 = 0x00000000fffbc000 [ 1085.501564] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1085.511442] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1085.520520] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1085.539718] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1085.550739] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1085.559012] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1085.569689] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1085.578511] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1085.592398] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1085.604079] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.613203] Interruptibility = 00000000 ActivityState = 00000000 [ 1085.619473] *** Host State *** [ 1085.623848] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.632645] RIP = 0xffffffff8116426f RSP = 0xffff888053e1f9d0 22:48:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1238, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x89, 0x5, "f31ca4d4f4908ca0db3642ecc993675b20612ada817a86e1d631a5b65be33bd4da780cfca5d79e65e9a04e5592061c87ebd7cbc45e9301ad92371352e02db3db5163e85ac7683ddf20a6863776fe5e1c3b780b55aa07e4d81a7f88de60e06d3cb5ca6f128ac15515f256f090d9edc2b442ad512f611453ec17fc68256be49572306af35360"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x117c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rng\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\x95\r\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "16a1064a46c8b720ca532a1a0220215260456d27452aadf4ff36d6d4144ebc97126f1fc830ff96d9047644b7d56c0ea2269a53c5f04532cfc7c383c90cabbdd7d30169addfd246a8ac1712348e54cbfbea77a5c503796adaff828ce0306a8e9a7337ddc554da88a91c9e0c44d673f686bb718b2c93241ee179d3bee4e52ee090fbd3a888adbbc92d1a5b5a642fcff36861938676c77e57bd64f50b73f11bf62876cbd6a689d8fe242e41"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "d66d9e6f71862c9f778f588ba45436447f451d921f0d17af5fce8803ff69f69ec84f952d7349fca455ea7a8145651edc6f2081bd4bb1437a30bbcca54cf81c412e5e99a3eab5f32253688bdfaf7ec3e4ab49dbe8f7fa034a16e129f3e778faa40983b3adf1823f0042f8e77ce425a447e96c0b8b81dbf927d6179b4d80a89e3b4ca37488cf782a8100f8172a2cb2b3f9757c18f2e4dd6097d4d33c26d492744576139f6a732f7b801bcd48a647147e7dd13e70136e3cbd9ac05e51f519d4d42c1264cc4d87804da461a18f2c116efb3025f7b4f7b20586a685433ea9d25fde05ba0b6aa6645a8a2ee7a974fe2f4678ea5fc8502a442e66d6270306ede2d00eed7a029fa78e4114001f5f2f21a7eb094dbe116bd60afb4982a4292d74efb7b0ffb319b4cf1325446416bb7246a26e2ab9a31e8e8c84ed417f92e0bdc708d0598d0e4b31299eee50a408fbf01d05836f8091eef070d9a079e7f32bfd5466bdb586ece4ebb08f8dba37f26a13336b014d2c9562026d1df6fcf338d774b9336474639ecc3641481935844ec509b02eedfc83c8f3e852de8ce2f2bf8a158fd18972250a99157ff482610aad75d9866d9d499510c93dba6d9451cde1603a6feb71c2727d07144527bdf954ac2f7e1a25186bad3189a88322f38ef0cbfcf4541c57a1caf8e87a7e035dc35d7987adeb88a5a587b2d21e9e35b92686185f4f3902a8b052e9e254315aaebd01495ee0cb41bd58b709180ee37e02389bbc91ea5cb4cc0aeac792d050bb39dbd97e78d2b521aa80de190e7319fee219acc6aa41e80e21c5e71d992a027ea0e46af55db66350e1cf7dbb502d1177ba00cbdf9f3613b6ac1046ed2f5d62f6053ff1774bb7a2a89d0135cc0a760bbea63c1a067b6d139d629f167b2b9076b61a9a51ddb359ba1e5141e4831f8a81f28b9365401a6a55a84a2e2be26196d307d2ae365b4b69c50d956e1e6ee5810c7af8cd77ecd769c0ff67415318c4772f3dad9493c5c9dc1e958fb9abdf8893962020e5cf6c477dfec3c454b851a61277fc4d758fe9e2272107cf51174710db5f5c63f59730b6ad817dfceb1b9a523c91ceb03a41536105964e802681905af5c36e17487d5f9b53f9a016ea6b1cd5659564cca79a3d4bbefccbaffd2fe17b89835641df611dbc21a51400af3be983b4d874891100563ba9702f860b25b06ec36f30e4760b6dfc4a98335fce49805bf8bc538cba202b0fc0deffbff9cf575906685d3f87e41aa4c0a659599db54e81d98930020b53d578c21081c81b43350ab71564f8992c319a7a618a78df5030b549286f422f9c60303870d818cbc019d2d1707380b9a161599fd083c31c5b025a96119a342fbfe2000ad4c14d94d7b61b31952539a0cd6b3a8310830af3577815cadbaf55a4349575f8acebc0481cab3af8f004df403419fe71f8ab7af55bb05d90cfe1bd6ea30d093c1a1fc791fbe5d70caa261f7d1ba28dd1f10811f3a389a59f1d81676cf5addeb579120cc31bf5c5598889f3bc729632a0db536d7af5185cfa8de1199e58e9caa7a94ab987620d0722e9919b0f2a60a575ab19dfd9f507059f1e1deee5c06a4ec78c568c17d8618e3e76be8b2876b1156c75ab09aac06128aac2a13919065ced59e150da37b6c3c29ad86c49afd2fd1761d03147b039dd600c36b548628f8ae7fdcb4359f69ba15dc6c0e2700e0f3c9743ee1de95eb8f07735c876b27230ed19fb476d85f8e866786655b7d74f363a5014a836616310034792e8afc08a7e81c4f5a161c5ee76770396bc6743bbe44e00cba1f61aec2a7d420dffc2b2159b7f83c47f8e1a986341326a0ac7af355a7a76ca3c82611aaac05c064957bab343e57eac6680c1bdd22b1c3cc03e6737d83c2adc793e67c415c1073d56d6fe82a554bd54a8aba484c206f4bb56f1d6b1cf0e964b25a636d521b44a99f19acbdc638b653cc32c3f616a4ffdc80d36666b455bbe4868a240f733adc724a342662565c270123724a8398c3cebab0003809b36c27d926de10015213a789b0e627e4a060da78790573d6d60a8a1cf3d1a2b54d08bd580312a11a376f69919194d9d90391efc7643ae17b9b612f6e09308fd978cd4adbf55a00a3a476940029657c32a24aefc61967052a5991abb5cf7e048ecbc18fb26801a41151f2bc02b06ff96e01c158771a4b9c2db05fd4fb280807c5477f41e534742aa769bbed843043ff76e185b854b8b891638d1c6f1f12b82f8881e7e688e2f70741935e7f5f8eb15e29bcc4d35d6c83987846f4fbaf7413516329ca4c6b60022a000341f96c39d145f7abed84bb16aed3732baf9c0f4bf1118e77ef05d5744d41fe2ea10ee1a4a75a35b192310375a74665cecf8074fad96fed8bc98624b66a59f9e52e836788c1aa2d984006a26dd27696223295c622da972a9aaac8252a1703132746548c0ec2b00ebbf1e5361d6bd41e90404350fd8a57613424f8b72214d59d71bdfbcb881cc2104f3792d8e0f2fd7c1fd0a03186fe00796283c10cd92dd208c82f927f1113f43d877a316c669da10dcb67cf2810e760ea61cb359758e8d187acb7d32172833f3ac4290f066c1cc3b93dc13242dfbdb8e2ea9686f2d81eded263c1859d9a0eb0d760ae3730af0f55fea90387db25f2fd1c7eacd19d6cde325b102b25cbabaf44bb1b21f6845451aba04416689a08b4c49baf535a38834cb07e2f216ff0a4c7ac45ccdfd9dc3d70591f20e074caf58b1ac7c9844008a76c2387b1ef4355e25ab19a42d79ec0bf60b2961a446a38d6963cb72e81b4c90cc13fc8a166dc24dfdf986d53510e8467fe0d19c81712e56f6529746477d67bb0417b57497cb29d8523ecadcd5b262c397c987e514068abdbc026758c6700c9b701045f8fb76a6127bed2b0da3cfc3a025d04a803424c8650c3d9414644c2448f17b7d86d250960bcfac0648c4192a9c24a547ce8dc15dc51f26ca7f81ef4f4606cc0783fc1c16bb85be06b3dda6ca059ed4928640f77550bae9d8c98f0509f424320a7e16516484b2f60feddc713ebd8f90be2baf5164dd3b3649c3a6d072b087f09055c219aa8ee083ba61157b802f114a04d9a9e3082b8c4403e3da358ccc344c1ec7d9030038c43b4c78cacd1bc9c3fd46a8cbd8ec77933cdeb548f330ec2d970b5e813b0a40a1c9de8a4a34cdb77d0445b683d762825e15e005c692672c1b9fc3bcad708c78cb9aaeb16a57b5c2306a73a26d9f1bd66e5117877438fdc8683667d9cd4b7e17d75fdcec583097e9c2da73682258d9d3bcee96d5b9262265115702bfe67ce4b4900c295332b7aefb053265818b07606fb145bf4898508b4bea7d7d62ad4a7adf92402abdf9af7e5f76de8d048e0035859c8c542fefed745ce3be60157f68e98690fdc24f6da6cc73ce340ec1fb08d373fac09c2ca136e6cc4aa70a8aa8e1688d102ee38b539737347dc3836d69e747a5696eb264ca85a9021cfe7041f102bda9169abb0dc64e3f7dc29336af0057b65f6796033646e3a3e9ade8af495a2892a66bdfee90d4b1387607e79b4dc50adb968dea83d3bfeebc018385e737cd83e1affc2371ad0363553f32ad91d1c4fa1fe529771646f56be12b8469e69196a2fd418287f544016143f4d391980c1f71d8e87ba3d1c507a5c064fcbe658ad5e4a6d6cc42c4cbe5a26ca245e3f3843114d2db07285270d09a73b212bba6fd4db4dfb2ad7b2295fafa13221571629168380737e2fa99f12e054bef70bbd7897b3412b173c79af8ffb38e992c2e3f943a47cdf5c42411269b91eebeef4bbae1119214a21f00096145cbd20b729176984c06a788b4dbae657aa3dd3d008446808980a2cc6470228f0a948a47d6af85b13866537793ef634a13d04264afcc124c0065db68567783e0a884a033796c145e9abf05ceddb4a294614762c066983d5d676f98bc19474c994e3f1dcd4b885e911bd5ae6ef4ff074ce39030898b51746bd5c432e42076f0e1141034a528cb12b16a821a917d603d3e37314e708cdfef194729b279b1592d1cf9d45c3e684275e961386605ebad488a5e4dcf8741099fa0f4be8d9d76b6d9bdc8855ca31d855d149c688a4e04c40396cdf8c27b587c4a30dce750df97bfe6f222c5ef0dc9e323f9e25407cf9f0a9c541e22189ff02fee25111efc5e01ed7844dd4a8cf4f055cd45e87101c5e8df49a1b1d016bc88eff324e2c6e63ac9de99a714f903541b8e89d480be053e59b8a0127c7ff16d0537c5041a22ede375553ed0f0e0441198be8e0d55d4d9d629f2a325168e50ebdb84f6bd40034d16fcc140f62c987cdf83e905a745ae14022bccac171ef74239ccbcc94f93d87fc508af0dce9a230df21dc20075c38c249a7a24ad36c4b7f9e28ed7146ddafd2985706bf112ef6fa75558272cb42423bf3f64352dec0ab6d6e0c3507a426c43e763285d5b4beeb38c0134d3db649a14a3b6158cfccf28aab1e10d0417f4b699aa0dd6f90804f811ed960cf1896aa2b4d0cc836884ee97e329ebcc2e6df9dd882ad31264d682f68bc45e82e4b31f3ae4fa0386545d49de50fc9faf97521afac824af410a74449bc4f32c2eeb815c5ceafec83462d0c7ad60e8740ff3180409936f7905f4b19fc60b181e9c44ccff4be717b107877bda62df9e345d539fa09f6977f8d63253e9f0e99ac27c511c42c3e78c01f1aa26bb9a0ad67c63ca6a8e27e77b78734d5bb7aca83e18e9516e02b6e75012b46cfa209edd87bdbf2f0e01da9ef47b11fe0455ba64eb734ea235af2cdfcb073a1300525951300eed96859423bddfd987b0ce7c2c2884216821e195181bb1db6230a93edb1e3d1852a93fb129cdf9c42d056e11df5c4fdaac1fb68176d12b276d1338403546817975fc0ad094542e8125b0857ec3f421922e4117cf32448e16815aee34d0c51206682284a8ddc78170ba601125cf3bf41a240dabef838517287444a1413c5e404ca8781c5d43adca95871b54f28d9c6db25733ecfa5910620f83a248cfc1dfab094d8a6add1d4845199f80cb5925efd38f892a998812a12e5fd820d405ba07a623b27075ff09a92155e08b523bb49e5ef20bed9fea4d2d26d5311360d8369e164450ae568824a4cac567f33deb01e3ef1f7c4d3c64d5b3741e6db5231ae40b4fc6f7445f76b37af5c7c87a0a2debd531b4f8f23eca4338c00aa633c8ec736e6151dd3271756e97e0ba8b70fe4461e9115bda531e023d4d6774e8da3c32c9d93fdeb1c18c907ea0569b935f2528b0dd9bdaa0a2b12ff3549492b6539d903499d4e4e3a883841219a7b773dca6dde85cc747d944871fbc817e97fdb72f3ad0801c011e3b0162892d92ee227d4899522af44c3d31e3be1214794dfe0c09ebd5b7883ae1c52dca8384e4757359253f5b863e2ded01aaa4c1184bcc6dfcc9aaaa218e8226dc45935136506f6a4c6470c9ad33d40f33cdd2ea087256b8b053ff9b9d126de524f2a87ebca62cc9e2b326e34fbcb3891cada16f3b55d24ce3ce9fca9f174c731beedccd4cac4b50c19e14037ececc181387235d407ce772ef36a437c252957e628066b2beb0335801eb7594b2874aa24b34285cbfaa952685909c22e9a7d08ae954f9a132c87973ec2ff797b44c8d80e771b96f49a791af94b27f79e0eb88712636d4ecd22d1b4384cfcab8b9bb3d05c53d9c9fc4f50ae71c1a82fc267419f018f5b0edb645ab9d6bc80f961f5ac921d4bd7833b45500015abd7edfd4a36a494802771340959efe848acde0f64ab67bf8945f0e119a65cf628ef5056d8ca65072a9886c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1238}, 0x1, 0x0, 0x0, 0x4010}, 0x40090) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000014c0)={0x1, 0xc0, 0x0, 'queue0\x00', 0x71f}) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000040)={0x6, {0x8, 0x1ff, 0x20}, {0x8, 0x3, 0x7f, 0x2b}, {0x0, 0x50cb}}) [ 1085.638767] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1085.647519] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.656121] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.664969] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1085.673516] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1085.685204] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1085.695717] CR0=0000000080050033 CR3=0000000062f2c000 CR4=00000000001426f0 [ 1085.703575] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1085.713391] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1085.721380] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1085.730299] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1085.736550] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1085.746638] *** Control State *** [ 1085.750690] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1085.757575] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1085.767656] EntryControls=0000d1ff ExitControls=002fefff [ 1085.777740] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1085.785150] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1085.796229] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1085.804798] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1085.812237] Interruptibility = 00000000 ActivityState = 00000000 [ 1085.818689] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1085.826342] *** Host State *** [ 1085.830192] reason=80000021 qualification=0000000000000000 [ 1085.837027] RIP = 0xffffffff8116426f RSP = 0xffff88805a89f9d0 [ 1085.844743] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1085.851861] IDTVectoring: info=00000000 errcode=00000000 [ 1085.857523] TSC Offset = 0xfffffdb851586af5 [ 1085.862786] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1085.874751] EPT pointer = 0x0000000097f9501e [ 1085.879339] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1085.887071] Virtual processor ID = 0x0003 22:48:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xffffffffffffffde) rmdir(&(0x7f0000000000)='./file0\x00') bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1085.901482] CR0=0000000080050033 CR3=000000009791e000 CR4=00000000001426f0 [ 1085.925232] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1085.936205] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1085.944462] *** Control State *** [ 1085.954958] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1085.974872] EntryControls=0000d1ff ExitControls=002fefff [ 1085.986317] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1086.015757] *** Guest State *** [ 1086.015867] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1086.031117] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1086.048389] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1086.058679] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 22:48:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00'}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1086.068376] reason=80000021 qualification=0000000000000000 [ 1086.078843] CR3 = 0x00000000fffbc000 [ 1086.089754] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1086.096686] IDTVectoring: info=00000000 errcode=00000000 [ 1086.111916] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1086.118092] TSC Offset = 0xfffffdb81b1b6cc0 [ 1086.126948] EPT pointer = 0x00000000a0cc801e [ 1086.146606] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1086.154799] Virtual processor ID = 0x0002 22:48:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x309543, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1086.163855] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1086.187962] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1086.217864] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.233992] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.252783] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.265604] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.286258] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1086.303573] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:48:31 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32=r1, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r3, @ANYBLOB], 0x70}}, 0x20000001) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r4}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r4, @ANYBLOB="08000b000300000008001900", @ANYRES32=r5, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r7, @ANYBLOB], 0x70}}, 0x20000001) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r8}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r8, @ANYBLOB="08000b000300000008001900", @ANYRES32=r9, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r11, @ANYBLOB], 0x70}}, 0x20000001) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) fcntl$setstatus(r0, 0x4, 0x0) [ 1086.320770] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1086.339969] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1086.344944] *** Guest State *** [ 1086.349437] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1086.363844] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 22:48:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x128, 0x10, 0x0, 0x201, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x3}, [@typed={0xc, 0x8f, 0x0, 0x0, @u64=0x6}, @generic="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", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x9}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:48:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xe, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008001) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="4f309b3791fe8a1f9b0d53d42aa3471ffe8941e776e7a6f2c3fd251716579576a79ab237e62dadfb2200f692973bdb406fb54e7eda13dea329c9bf856519b524c142e7c3802eb39f8480894ec470215ef2ca88ff0b0730f35ae130fe253dd42d19074191611d6bed3d37054495acb4b52e14e0a60ff410459bd7021535", 0x7d, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f00000003c0)={r5, 0x49, &(0x7f0000000340)=""/73}) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1086.365799] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1086.372858] Interruptibility = 00000000 ActivityState = 00000000 [ 1086.401783] *** Host State *** [ 1086.418911] RIP = 0xffffffff8116426f RSP = 0xffff8880524a79d0 [ 1086.428326] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1086.445177] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1086.455572] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1086.467842] CR3 = 0x00000000fffbc000 [ 1086.468632] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.485154] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1086.497329] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1086.504687] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:31 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x3) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'wg0\x00', @remote}) [ 1086.523089] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1086.532389] CR0=0000000080050033 CR3=0000000055a01000 CR4=00000000001426f0 [ 1086.544445] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1086.570576] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1086.574855] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.604376] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1086.607291] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.624023] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.637005] *** Control State *** [ 1086.644948] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0xfffffffffffffd7c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0xffffffffffffff83) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1086.668885] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.670966] EntryControls=0000d1ff ExitControls=002fefff [ 1086.693068] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1086.699831] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.718603] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1086.727097] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1086.745777] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1086.752912] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1086.766103] reason=80000021 qualification=0000000000000000 22:48:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x4, 0x10}, 0xc) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+'}, 0x16, 0x3) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1086.780020] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1086.798341] IDTVectoring: info=00000000 errcode=00000000 [ 1086.804343] TSC Offset = 0xfffffdb7c1c508fb [ 1086.808810] EPT pointer = 0x0000000084fbb01e [ 1086.809872] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1086.816910] Virtual processor ID = 0x0003 22:48:31 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0xa8400) fcntl$setstatus(r0, 0x4, 0x0) [ 1086.847630] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1086.873653] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:48:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1086.896205] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1086.928266] Interruptibility = 00000000 ActivityState = 00000000 22:48:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'bond_slave_1\x00', 0xd321}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1086.953252] *** Host State *** [ 1086.965515] RIP = 0xffffffff8116426f RSP = 0xffff88805232f9d0 [ 1086.990975] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1087.002509] *** Guest State *** [ 1087.017674] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1087.017825] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1087.048683] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1087.073462] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1087.093428] CR0=0000000080050033 CR3=0000000090663000 CR4=00000000001426e0 [ 1087.098908] CR3 = 0x00000000fffbc000 [ 1087.105560] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1087.110524] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1087.118865] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1087.128206] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1087.138563] *** Control State *** [ 1087.144576] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1087.149000] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1087.175425] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1087.177455] EntryControls=0000d1ff ExitControls=002fefff [ 1087.192351] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) r2 = socket(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000240)={'macvlan0\x00', 0x400}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x5, 0x101}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$sndseq(r1, &(0x7f0000000040), 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r4, 0x4, 0x0) [ 1087.195725] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1087.212430] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1087.214560] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.231910] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1087.246270] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r1, r2}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r4}, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r5, r6}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r3, r6}, &(0x7f0000000040)=""/9, 0x9, &(0x7f00000000c0)={&(0x7f0000000080)={'crct10dif\x00'}}) [ 1087.249688] reason=80000021 qualification=0000000000000000 [ 1087.276287] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.277225] IDTVectoring: info=00000000 errcode=00000000 [ 1087.293464] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.305421] TSC Offset = 0xfffffdb795093d5a [ 1087.316464] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1087.316736] EPT pointer = 0x0000000090ab001e [ 1087.343466] Virtual processor ID = 0x0002 [ 1087.343982] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:48:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1087.402898] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1087.423981] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 22:48:32 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet6_buf(r3, 0x29, 0x14, &(0x7f0000000080)=""/92, &(0x7f0000000100)=0x5c) [ 1087.461246] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1087.481994] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1087.496503] *** Guest State *** [ 1087.503977] Interruptibility = 00000000 ActivityState = 00000000 [ 1087.506765] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1087.518492] *** Host State *** [ 1087.531791] RIP = 0xffffffff8116426f RSP = 0xffff88805d0079d0 [ 1087.537429] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1087.545828] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1087.556943] CR3 = 0x00000000fffbc000 22:48:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x201001) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76923aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d38efc06850000ffffffe95eafc2ca385c5d3a1a18b3bc6228e89af081643a5badc9e00063ec3ef57dc756e0db2b26124c377f2f454dd475ac5b642dbf656838d6652dd00c17a26d186573a05f768cb9e8a1dc970553bfa4374ed5989a263c6966a8c8daf9cd2dddc063d85c1108c05e3f8fa4a0c2a3f1ae4d8dc0e3d8630a8afb8ecb74"]}) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00b4c4e3f0722a733f783f1fd6fe93c6bbcbaba4cf4b7db918b91921253757e9a3d9bf33701b4140996c0dc96af21a93ec071501e10efc8bf8c9522caf43f379202e335ce139bfe8bc9c6c2447369e06ffc8e02e84cd356a48d492a271e93c52288f637d7761dad07756a538cb7656e057513b7ff2df4a6cff20043fa9f2a5d87702c2436b821b5d96a59f95cc6a1f3f8acb1069f19d0a9f3a1ce31be52e12f47e25421912e4dfa1ef27ee1e9d835d8c673654bbe56700001381464835272ff78da329f2249f06dfe79de03d08a4a990a4305d50a9981de7e455bba27f5e29db3dc401f392cdf24ce64a27f5139de40751abda11f3b2055db3764874c684004ac25549f8b65c1628b7f7ee6d4a34e88b2907789fec8a669dcf89b9e51a996296eabf68fc44029cf473d9ab8f5b409b9cb59dce1b811e7b99521fbcd22450fa5de4929fed32fcfac9df5ff8e9a0a027b5e436d6ed3259b2ce1ce739159d7232bf91e3bea450c6f2c230a2fdd1c02af7d74c12fe9f2298c11516048766483e733c61c7fce2c2732267c2332ea803b481adc0955482d8ef78fc3584d49051ec1903096b1234730bc944e344d952b3fc589a0263a34951e0243203368a230060289adecb66d505cf5e0ce4059fb5d4225047a292406fb6a3146940368126ceb6ccbe2e6b38d3c5095675bc54a535df19341fbd82505e59de5f07bd8f716fc66d2759cd9a1981e67b000000000000000000000000802f8b1452f0e6451bc4dc24e60153d94abcb4b5653f16975c4827f62e8ff8f5e3019830426b68a27b3c906044252522b929a861b83705002afdc618bc5c0bcb18816be431150a80245d9fe989350a1c254691527b0031f0cf1d796d42b9a179b3b9000f40567b29b7abd0f062854ec07df72c6fdf6e9b1ca2aab15db56c8f5ee1e88c328d6a220b53326889d7f72ea13c4d168c0bb7", @ANYRESOCT=r4, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000009bf385cb1e046d8e162c0325b7b1d4e83d1283f4cf9d4a3b183c1516b0bbcf6f5838fa155c61114c238ebcb46b54da18194ce2fbc97015c199a6cc1a93ba7c87bde7c2626e570e9b7ffe7115ebb1f1d5ade39cfc46d64ed284d3e0c446f49d496fc0d3f131273ad047caaf82b0cb1884773d87d839a618da93b862bc53b39467fe3d319a9ee075e6486706e366679433589d77fd2fc39ed2a284d913f13f45d49e2e802a795ab8efd9554a54183ce19d06fb7bb2cb4b740299d4835ea44068ecdc11bd6b48e7000000000000000000", @ANYRES16=r4, @ANYBLOB="200025bd7000ffdbdf2502000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8004) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000800}, 0x48000) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x14c, r4, 0xa, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3c88}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x37}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) [ 1087.565579] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1087.566732] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1087.578538] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1087.587734] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1087.604625] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1087.606812] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1087.617772] CR0=0000000080050033 CR3=0000000058168000 CR4=00000000001426f0 [ 1087.624412] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.640194] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1087.649728] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.664429] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1087.669518] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.677359] *** Control State *** [ 1087.690691] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1087.693463] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1087.712211] EntryControls=0000d1ff ExitControls=002fefff [ 1087.727734] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1087.745489] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1087.756164] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:48:32 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x680400) fcntl$setstatus(r0, 0x4, 0x0) mq_open(&(0x7f00000000c0)=':H/}P}{\xdf\x05][,[\xdd.\xd5z{:\x00', 0x2, 0x1b9, &(0x7f0000000080)={0x7fff, 0x3, 0x0, 0x4}) [ 1087.773045] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1087.788657] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1087.807710] IDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:32 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20081, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000280)={0x2, 0x400, 0x80000001, 0x52, &(0x7f0000000080)=""/82, 0xf7, &(0x7f0000000100)=""/247, 0x7e, &(0x7f0000000200)=""/126}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r1, 0x4, 0x0) [ 1087.816006] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1087.816012] reason=80000021 qualification=0000000000000000 [ 1087.816017] IDTVectoring: info=00000000 errcode=00000000 [ 1087.816022] TSC Offset = 0xfffffdb73b5877f3 [ 1087.816029] EPT pointer = 0x000000009513501e [ 1087.816036] Virtual processor ID = 0x0003 22:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1087.957311] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1087.990389] *** Guest State *** [ 1087.996018] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1087.999403] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1088.011907] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1088.011911] CR3 = 0x00000000fffbc000 [ 1088.011917] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1088.011924] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1088.011935] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1088.011943] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1088.011957] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.011969] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.011981] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.011994] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.012006] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.012014] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1088.012026] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1088.012036] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1088.012048] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1088.012055] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1088.012063] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1088.012069] Interruptibility = 00000000 ActivityState = 00000000 [ 1088.012072] *** Host State *** [ 1088.012080] RIP = 0xffffffff8116426f RSP = 0xffff888063fdf9d0 [ 1088.012101] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1088.012109] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1088.012117] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1088.012128] CR0=0000000080050033 CR3=0000000058168000 CR4=00000000001426f0 [ 1088.012139] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1088.012148] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1088.012151] *** Control State *** [ 1088.012157] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1088.012162] EntryControls=0000d1ff ExitControls=002fefff [ 1088.012171] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1088.012177] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1088.012183] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1088.012187] reason=80000021 qualification=0000000000000000 [ 1088.012192] IDTVectoring: info=00000000 errcode=00000000 [ 1088.012196] TSC Offset = 0xfffffdb6b2050d32 [ 1088.012202] EPT pointer = 0x000000008a0a601e [ 1088.012209] Virtual processor ID = 0x0003 [ 1088.156861] *** Guest State *** [ 1088.187828] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1088.255919] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1088.259858] Interruptibility = 00000000 ActivityState = 00000000 [ 1088.281355] *** Host State *** [ 1088.284658] RIP = 0xffffffff8116426f RSP = 0xffff88805165f9d0 [ 1088.291132] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1088.297657] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1088.304441] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1088.306699] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1088.339371] CR0=0000000080050033 CR3=0000000084e33000 CR4=00000000001426e0 [ 1088.353086] CR3 = 0x00000000fffbc000 22:48:33 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x10001, 0x3, 0x36314d59, 0x7, 0x4c63, 0x1f, 0x8, 0x7ff, 0x1, 0x1, 0x2, 0x1}}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000280)={0x1, r5}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000002c0)) [ 1088.357815] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1088.364456] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1088.377081] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1088.383979] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1088.394098] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1088.401467] *** Control State *** [ 1088.405113] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1088.415615] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1088.424192] EntryControls=0000d1ff ExitControls=002fefff [ 1088.433665] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.442191] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1088.454540] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.462906] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1088.473244] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1088.480156] reason=80000021 qualification=0000000000000000 [ 1088.486670] IDTVectoring: info=00000000 errcode=00000000 [ 1088.495993] TSC Offset = 0xfffffdb6f800114a [ 1088.499596] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.500589] EPT pointer = 0x00000000a49e201e [ 1088.516376] Virtual processor ID = 0x0002 [ 1088.533103] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.548093] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:33 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1088.563919] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1088.573930] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1088.586783] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1088.604403] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1088.628831] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1088.643337] *** Guest State *** [ 1088.646609] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1088.653268] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:33 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x10000, 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) fcntl$setstatus(r0, 0x4, 0x0) [ 1088.673352] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1088.692697] CR3 = 0x00000000fffbc000 [ 1088.694098] Interruptibility = 00000000 ActivityState = 00000000 [ 1088.699918] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1088.725329] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1088.726453] *** Host State *** [ 1088.742924] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1088.745675] RIP = 0xffffffff8116426f RSP = 0xffff8880617df9d0 [ 1088.764325] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1088.765536] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1088.781385] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.791392] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1088.798388] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.811404] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1088.817122] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.828021] CR0=0000000080050033 CR3=00000000a11fd000 CR4=00000000001426f0 [ 1088.834203] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.847144] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1088.853093] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1088.867580] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1088.872300] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1088.885295] *** Control State *** [ 1088.891714] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1088.893266] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1088.907593] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1088.916933] EntryControls=0000d1ff ExitControls=002fefff [ 1088.926871] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1088.933716] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1088.944138] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1088.954761] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1088.957639] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1088.973217] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 22:48:33 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x88400) fcntl$setstatus(r0, 0x4, 0x0) [ 1088.973584] Interruptibility = 00000000 ActivityState = 00000000 [ 1088.994056] *** Host State *** [ 1089.001812] reason=80000021 qualification=0000000000000000 [ 1089.008125] IDTVectoring: info=00000000 errcode=00000000 [ 1089.013154] RIP = 0xffffffff8116426f RSP = 0xffff8880601079d0 [ 1089.034604] TSC Offset = 0xfffffdb69b13f0ab [ 1089.038883] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1089.043723] EPT pointer = 0x0000000051caa01e [ 1089.058767] Virtual processor ID = 0x0003 [ 1089.059450] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 22:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1089.116008] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1089.138286] CR0=0000000080050033 CR3=000000009170c000 CR4=00000000001426f0 [ 1089.156032] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 22:48:34 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x8) [ 1089.184303] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1089.197303] *** Control State *** [ 1089.212502] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1089.227628] *** Guest State *** [ 1089.235866] EntryControls=0000d1ff ExitControls=002fefff [ 1089.262814] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1089.268953] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1089.280571] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880d8) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1089.299429] CR3 = 0x00000000fffbc000 [ 1089.306475] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1089.306738] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1089.319231] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1089.332541] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:48:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r7, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={r3, r8, 0x9}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1089.345053] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1089.352580] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1089.352596] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.352608] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.352620] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.352633] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.352645] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1089.352654] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1089.352667] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1089.352676] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1089.352688] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1089.352696] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1089.352704] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1089.352710] Interruptibility = 00000000 ActivityState = 00000000 [ 1089.352714] *** Host State *** [ 1089.352723] RIP = 0xffffffff8116426f RSP = 0xffff888089fb79d0 [ 1089.352739] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1089.352748] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1089.352756] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1089.352767] CR0=0000000080050033 CR3=000000009ff66000 CR4=00000000001426e0 [ 1089.352778] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 22:48:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x190, 0x190, 0x34, 0x17000000, 0x3b, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) r2 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x1) getdents(r2, &(0x7f0000000740)=""/4096, 0x1000) write$binfmt_script(r3, 0x0, 0x141) close(r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xbeed3f865f395b1d, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[@ANYBLOB="280100001500000225bd7000fbdbdf25010880000100779365b4b3e545b3bb4c9bac2ab01ba5efda7ab72627d5153af157734f7c798e84eace077b6d6bfb6d074482b1d147d54c209e7bde417cc6421b80a4d19dbb791c0e5c539b71393272682a61cc11ad0541acd87494ce2e906c012e1d504b685585a678307daa76c03aaa4ded5ccb786b9a1b37a148bd94fd9992a26b10000100a2c4d24410d7fc2427812e7dde65336f3b5ab65708830001001cee2c92fa239b6d037792686b78040988ef2b5d9445f0c022aa65175c64760e3c827ae3f55742166a8d27191f6f1a58989e672251709b9b0104b88a07158214d659abda86c5fc4a48163eaafc130375f398ec44e71050e045759e022e809c99029cc9725a91f1f49814f0cc37cc010a5251f890a7a7d8780c2198cfcb17c1000000"], 0x128}, 0x1, 0x0, 0x0, 0x24048040}, 0x1) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1089.352786] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1089.352789] *** Control State *** [ 1089.352795] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1089.352800] EntryControls=0000d1ff ExitControls=002fefff [ 1089.352809] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1089.352814] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1089.352820] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1089.352825] reason=80000021 qualification=0000000000000000 [ 1089.352829] IDTVectoring: info=00000000 errcode=00000000 [ 1089.352834] TSC Offset = 0xfffffdb60a944631 [ 1089.352840] EPT pointer = 0x0000000094a8c01e [ 1089.352847] Virtual processor ID = 0x0003 [ 1089.560131] Cannot find add_set index 0 as target 22:48:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000001, 0x8c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x800) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x1}) 22:48:34 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$setstatus(r0, 0x4, 0x44000) [ 1089.626153] Cannot find add_set index 0 as target [ 1089.706423] *** Guest State *** [ 1089.735442] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1089.748445] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1089.759062] CR3 = 0x00000000fffbc000 [ 1089.770100] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1089.776200] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1089.789686] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1089.804972] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1089.823223] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.847173] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.855464] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.868247] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.888274] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1089.905310] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1089.913760] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1089.926019] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1089.934680] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1089.938898] reason=80000021 qualification=0000000000000000 [ 1089.946664] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1089.949278] IDTVectoring: info=00000000 errcode=00000000 [ 1089.956323] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1089.961597] TSC Offset = 0xfffffdb65a7b6c09 [ 1089.972643] Interruptibility = 00000000 ActivityState = 00000000 [ 1089.973079] EPT pointer = 0x000000008deef01e [ 1089.979228] *** Host State *** [ 1089.983650] Virtual processor ID = 0x0002 [ 1089.987944] RIP = 0xffffffff8116426f RSP = 0xffff8880524a79d0 22:48:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x6c8c02, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000280)={"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"}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="4700000000007a083fefb24c93"]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="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", 0x1000) sendmsg$AUDIT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x30000001}, 0x4) 22:48:34 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup3(r1, r0, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20000080) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x105000, 0x0) fstat(r5, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000340)={0x0, 0x258, 0x300, 0x0, 0x4, 0x0, 0x0, 0x0, {}, {}, {0xfffffffe, 0x1}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) getsockname(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000100)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r8, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RMKNOD(r8, &(0x7f00000001c0)={0x14, 0x13, 0x2, {0x20, 0x3, 0x5}}, 0x14) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000240)={0x41, "5e60406c375714e098a4a9e1cc5ae6f3b7c8c8da088af08f720c6b20414044c68fbce60eeb1d562f6c1b3bf182189d666289a769d912d838bc3188afa157bf9b776cf93da876d1790e27873fb39f22eea1ce63bffc62cf7879898e1cd3a47dd8dbb1fbeefebe83fcda529150b26df60e7a77e33d789ae9ec837a876bd57abfce"}) 22:48:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x4, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ec2942}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40a1b867}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x626cf620}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60d056b9}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f1b5e20}]}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7039cf6f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d980308}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0xf0}, 0x1, 0x0, 0x0, 0x34000011}, 0x800) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r2, 0x4, 0x0) 22:48:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x4, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000380)={[], 0x9, 0x6, 0xffffffff, 0x0, 0x1, r2}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200040) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) ptrace$setregset(0x4205, r6, 0x1, &(0x7f00000000c0)={&(0x7f0000000280)="b4e7820180d594dd902c8176a67c30dd002ecc7682985b98cb82ef6634ad63593a95e76786ce895e5c3b71d75939895df6b05817754dc39c845ca0de8bc7ae3dbacb00f656ac43972675f6d0751ed30a33d851b7724ecc15232e505a150acc4c7896963aad6ee4fdc9dd87897a218cd614e927ee797e270807eb54235cafa4372c8ed4aa7f718ff579b3e43305704848840198161f7511b5f0b003162a53793c87771afdcba5d268b17d99a3feb249d86f64e24f97fda11cd09db52ef53aec1f024eccde2cbdc7bd81c030847d38ed6443124e40c77929b10de51b9283b4", 0xde}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1090.001424] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1090.007827] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1090.036192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=11715 comm=syz-executor.2 22:48:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1090.043677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=11717 comm=syz-executor.5 [ 1090.054127] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1090.076254] CR0=0000000080050033 CR3=000000005b499000 CR4=00000000001426e0 [ 1090.085750] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 22:48:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x1e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) [ 1090.118896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=11726 comm=syz-executor.5 [ 1090.143638] *** Guest State *** [ 1090.148489] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1090.154532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=11715 comm=syz-executor.2 22:48:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x640, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080)=0x200, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'team_slave_1\x00', {0x8c7a}, 0x811}) 22:48:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x49) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) read$eventfd(r2, &(0x7f0000000000), 0x8) [ 1090.174349] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1090.197060] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1090.218035] *** Control State *** [ 1090.227690] CR3 = 0x00000000fffbc000 [ 1090.237052] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1090.245553] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1090.255728] EntryControls=0000d1ff ExitControls=002fefff [ 1090.265892] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1090.277539] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1090.286044] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1090.295403] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1090.308287] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1090.321219] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1090.328129] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.337784] reason=80000021 qualification=0000000000000000 [ 1090.346878] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.355474] IDTVectoring: info=00000000 errcode=00000000 [ 1090.356582] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.362544] TSC Offset = 0xfffffdb5c73895d1 [ 1090.372790] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.376330] EPT pointer = 0x000000008b32b01e [ 1090.382306] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.386061] Virtual processor ID = 0x0003 [ 1090.398326] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1090.407051] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1090.419209] IDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000040)=0x28) 22:48:35 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x2, {0x2}}, 0x18) [ 1090.427310] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1090.442268] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1090.460380] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1090.472062] Interruptibility = 00000000 ActivityState = 00000000 [ 1090.493587] *** Host State *** [ 1090.503016] RIP = 0xffffffff8116426f RSP = 0xffff8880601979d0 [ 1090.506882] *** Guest State *** [ 1090.510507] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1090.518858] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1090.518967] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1090.528797] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1090.543952] CR0=0000000080050033 CR3=000000009bb2d000 CR4=00000000001426e0 [ 1090.550012] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1090.554763] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1090.564316] CR3 = 0x00000000fffbc000 [ 1090.568495] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1090.571307] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1090.577980] *** Control State *** [ 1090.586684] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1090.588805] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1090.593585] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1090.593593] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1090.593605] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593616] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593626] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593637] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593649] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593656] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1090.593668] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593675] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1090.593687] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1090.593693] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1090.593700] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1090.593706] Interruptibility = 00000000 ActivityState = 00000000 [ 1090.593708] *** Host State *** [ 1090.593716] RIP = 0xffffffff8116426f RSP = 0xffff8880863a79d0 [ 1090.593731] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1090.593738] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1090.593745] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1090.593754] CR0=0000000080050033 CR3=000000008fadd000 CR4=00000000001426f0 [ 1090.593764] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1090.593772] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1090.593775] *** Control State *** [ 1090.593780] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1090.593784] EntryControls=0000d1ff ExitControls=002fefff [ 1090.593792] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1090.593797] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1090.593802] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1090.593825] reason=80000021 qualification=0000000000000000 [ 1090.593829] IDTVectoring: info=00000000 errcode=00000000 [ 1090.593834] TSC Offset = 0xfffffdb5592d0f3f [ 1090.593839] EPT pointer = 0x000000008d3c701e [ 1090.593846] Virtual processor ID = 0x0003 [ 1090.817923] EntryControls=0000d1ff ExitControls=002fefff [ 1090.824111] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1090.833534] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 22:48:35 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) dup(r1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = semget(0x3, 0x3, 0x100) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x4, @mcast1, 0x993}, {0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x20}, 0x1}, 0x400, [0x8000, 0x7, 0x80, 0x242, 0x8000, 0x2, 0x7, 0x5]}, 0x5c) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}, {0x4, 0xfff7, 0x1000}, {0x4, 0x7fff, 0x1000}, {0x2, 0x8, 0x800}, {0x1, 0x1, 0x800}, {0x3, 0x3, 0x1000}], 0x6, &(0x7f0000000040)={0x77359400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:35 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') dup(r1) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) fadvise64(r0, 0x5, 0xa947, 0x3) [ 1090.840558] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1090.847195] reason=80000021 qualification=0000000000000000 [ 1090.853805] IDTVectoring: info=00000000 errcode=00000000 [ 1090.868369] TSC Offset = 0xfffffdb58fce2eba [ 1090.873247] EPT pointer = 0x00000000663b901e [ 1090.884168] Virtual processor ID = 0x0002 22:48:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x800000}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x700, 0x130, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x43}) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x9, 0x100) [ 1090.947737] *** Guest State *** [ 1090.955468] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1090.985748] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1090.998367] CR3 = 0x00000000fffbc000 22:48:35 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0x0]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="55bd0800000000000000dfe4", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="0400fdfffffffffe07000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10ff010000000000001b040000000000f54d97ed018b07191564073f132b052ecb0e00000000000029369bc93726c0c57b2f1a5f1111e15ddf0d4b822056efd952d5271fe9bab204bddea1b0b57bd4d5b89e842ee5b90656a13f4134989ac390fe6ecb6b5b4931600e634267d4a6b83b8d5b08000000000000009de25c6fd200529213b41587945476441bc782fde57d8636eb0c454b2a7e"], 0x5c, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r7, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000240)={0x4f, 0x2, {}, {0xffffffffffffffff}, 0x0, 0xa}) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1091.021341] *** Guest State *** [ 1091.025029] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1091.032091] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1091.043148] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1091.053553] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:36 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x28) ioctl(r1, 0x8000, &(0x7f0000000040)="b83789cb976e4c4225e5404dfd6076c8d9e3edcdfb4d0e3575794afb1f22617b8a688b3b89f3c1f0821bc9805bfdd9217f66d1035064cfbe74c6f4d3aedcb10349fcd9125263bd898a5f7f563888e37aa6d42d0d1b4215d312591040d20d451c4303601842dafac5a423f132243f18e9a4727d26497842e19946483f3b3fd4fbe07c") 22:48:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FIONCLEX(r1, 0x5450) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1091.073137] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1091.083266] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1091.103787] CR3 = 0x00000000fffbc000 [ 1091.109630] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1091.135628] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.151508] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1091.171837] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:36 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0xe4003) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1091.181248] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1091.190398] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1091.203202] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.226436] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.235439] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.254353] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.264263] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:36 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x2014}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x190, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0x7fffffff}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7}) [ 1091.276708] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.289300] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1091.297462] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1091.306649] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1091.318404] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:36 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x20440) mq_open(&(0x7f0000000080)='{}}\x00', 0x1, 0x30, &(0x7f00000000c0)={0x1, 0x4, 0xfffffffffffffff8, 0x4}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0xb, 0x8}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) [ 1091.327715] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1091.341747] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1091.351354] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1091.361474] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1091.370849] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1091.384307] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1091.392748] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1091.418453] Interruptibility = 00000000 ActivityState = 00000000 [ 1091.427111] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1091.441428] *** Host State *** [ 1091.447992] RIP = 0xffffffff8116426f RSP = 0xffff8880617df9d0 [ 1091.455402] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1091.474039] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1091.481765] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1091.490584] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1091.498510] Interruptibility = 00000000 ActivityState = 00000000 [ 1091.505697] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1091.512699] *** Host State *** [ 1091.516784] RIP = 0xffffffff8116426f RSP = 0xffff88805578f9d0 [ 1091.527321] CR0=0000000080050033 CR3=0000000065a17000 CR4=00000000001426e0 [ 1091.535169] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1091.542528] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1091.550163] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1091.558129] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1091.565088] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1091.571987] *** Control State *** [ 1091.575506] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1091.583127] CR0=0000000080050033 CR3=00000000624bc000 CR4=00000000001426e0 [ 1091.590952] EntryControls=0000d1ff ExitControls=002fefff [ 1091.596647] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1091.604299] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1091.612407] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1091.618607] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1091.626344] *** Control State *** [ 1091.630619] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1091.637521] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1091.645026] EntryControls=0000d1ff ExitControls=002fefff [ 1091.651616] reason=80000021 qualification=0000000000000000 [ 1091.658478] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1091.666361] IDTVectoring: info=00000000 errcode=00000000 [ 1091.676522] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1091.686113] TSC Offset = 0xfffffdb51c8b1877 [ 1091.691116] EPT pointer = 0x0000000086f9a01e [ 1091.695647] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1091.703475] Virtual processor ID = 0x0002 [ 1091.707722] reason=80000021 qualification=0000000000000000 [ 1091.716613] IDTVectoring: info=00000000 errcode=00000000 [ 1091.722795] TSC Offset = 0xfffffdb515374373 [ 1091.727637] EPT pointer = 0x00000000a8ade01e 22:48:36 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:36 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x1c1182) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r1, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xfffffffa, r1}, 0x8) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) prctl$PR_SET_SECUREBITS(0x1c, 0x19) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000000)={0x10, 0x3, 0x15, "27c9f7539a2433bc5237c0512c2dfb21dd0648057fef4a4f4d194fcd19253d094ec55b25d81be752a705ea3e6f085a893b45b97fb6b8dc6e3898857e", 0x1, "c0d099c58a5982984ca8475bde437ed89f0110ba87e0c643a0454850f97e0c3de5ccfead61e2736360b2b8c8f9de48c53bbac8d0f2938d5ea171359a", 0x108}) 22:48:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = socket(0x43, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="86c9f4ba", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x70, &(0x7f0000000040)={r4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r4, 0x8c64}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x8) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x103002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f02000000000000000001000000000000000c41f0000014001462726f6164636173742d6c696e6b1177"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, r8, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x54010}, 0x0) 22:48:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000480)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x120, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x4080) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:36 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$setstatus(r0, 0x4, 0x0) 22:48:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1091.733224] Virtual processor ID = 0x0003 22:48:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x3000, 0x101000}) 22:48:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-ce\x00'}, 0x58) [ 1091.837838] *** Guest State *** [ 1091.847997] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1091.870156] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1091.877329] *** Guest State *** 22:48:36 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x8, 'syz0\x00', 0xa6ef}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x2, 0x8, 0xff, 0x80000, r0}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) [ 1091.890126] CR3 = 0x00000000fffbc000 [ 1091.893371] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1091.897786] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1091.918529] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0104003a218085f2e8c1d9a383ea5c538700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x5}, 0x8) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(lrw(twofish),tgr192-generic)\x00'}, 0xffffff4b) [ 1091.954302] CR3 = 0x00000000fffbc000 [ 1091.956704] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1091.969873] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1091.996286] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1091.998473] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1092.010910] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1092.025189] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1092.032205] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:36 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x22000, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={[], 0x0}, 0x8, 'veth1_macvtap\x00'}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1092.038132] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.055845] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.058607] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.072410] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.080895] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.084324] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.095876] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.108036] Unknown ioctl 35084 [ 1092.110351] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.112039] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.128075] Unknown ioctl 35084 [ 1092.134203] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.139281] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1092.152619] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.160946] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1092.176089] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.176922] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1092.199098] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1092.206837] Interruptibility = 00000000 ActivityState = 00000000 [ 1092.213918] *** Host State *** [ 1092.217361] RIP = 0xffffffff8116426f RSP = 0xffff88805578f9d0 [ 1092.218696] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.224103] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1092.238136] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1092.246364] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1092.252721] CR0=0000000080050033 CR3=000000008c014000 CR4=00000000001426f0 [ 1092.253184] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1092.260170] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1092.260180] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1092.260183] *** Control State *** [ 1092.260189] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1092.260194] EntryControls=0000d1ff ExitControls=002fefff [ 1092.260203] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1092.260208] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1092.260213] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1092.260219] reason=80000021 qualification=0000000000000000 [ 1092.260223] IDTVectoring: info=00000000 errcode=00000000 [ 1092.260227] TSC Offset = 0xfffffdb4a370af7e [ 1092.260233] EPT pointer = 0x000000005609901e [ 1092.260240] Virtual processor ID = 0x0002 [ 1092.342532] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.350684] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1092.358720] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1092.365361] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1092.373281] Interruptibility = 00000000 ActivityState = 00000000 [ 1092.379848] *** Host State *** [ 1092.383122] RIP = 0xffffffff8116426f RSP = 0xffff88805a89f9d0 [ 1092.389412] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1092.395869] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1092.403829] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1092.409909] CR0=0000000080050033 CR3=000000009ff66000 CR4=00000000001426e0 [ 1092.417079] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1092.424118] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1092.430347] *** Control State *** [ 1092.433828] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1092.440822] EntryControls=0000d1ff ExitControls=002fefff 22:48:37 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:37 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="05000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x400}}, 0x63f, 0x639}, &(0x7f0000000100)=0x90) [ 1092.446356] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1092.454802] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1092.461815] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1092.468458] reason=80000021 qualification=0000000000000000 [ 1092.475082] IDTVectoring: info=00000000 errcode=00000000 [ 1092.480789] TSC Offset = 0xfffffdb49fe9966d [ 1092.485158] EPT pointer = 0x0000000053e2501e [ 1092.489840] Virtual processor ID = 0x0003 [ 1092.551046] *** Guest State *** [ 1092.554499] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1092.564240] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1092.573287] CR3 = 0x00000000fffbc000 [ 1092.577020] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1092.583780] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1092.590020] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1092.596748] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1092.604990] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.613876] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.622115] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.630372] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.638395] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x80000, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getgid() fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000000)) 22:48:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x101800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f02000000000000000001000000000000000c41f0000014001462726f6164636173742d6c696e6b1177"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40001) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfa, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r6, 0x917}, 0x14}, 0x1, 0x400300}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040895}, 0x48085) 22:48:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1092.646551] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.654731] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1092.662939] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1092.684887] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1092.707285] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1092.723151] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1092.745007] Interruptibility = 00000000 ActivityState = 00000000 [ 1092.746420] *** Guest State *** [ 1092.751434] *** Host State *** 22:48:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4040, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="d81d04fba74e49", 0x7) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) [ 1092.758022] RIP = 0xffffffff8116426f RSP = 0xffff88805d60f9d0 [ 1092.766409] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1092.778328] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1092.792461] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 22:48:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x1, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000240)={0x36, 0x5, 0x7, 0x4, 0x475d}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140)=0x752, 0x4) r4 = dup(r2) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000080)={0x1, 0x200, 0x5, 0x101, 0x8000, 0x4}) [ 1092.799264] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1092.812459] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1092.814848] CR3 = 0x00000000fffbc000 [ 1092.826497] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1092.831154] CR0=0000000080050033 CR3=000000008c194000 CR4=00000000001426f0 [ 1092.844360] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1092.850134] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1092.868705] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1092.873489] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1092.891219] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1092.895898] *** Control State *** 22:48:37 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x521401, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 22:48:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$rfkill(r2, &(0x7f0000000000)={0x240, 0x8, 0x3, 0x0, 0x1}, 0x8) [ 1092.912650] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1092.924515] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.953250] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.956115] EntryControls=0000d1ff ExitControls=002fefff 22:48:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x2, 0x80000001, 0x3, 0xffffe000}, 0x14) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffffff}, {0xfffffffc, 0x40}, {0x4}, {0xfffffffe}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000005c0)) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x108, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x9, 0x0, 0x28}, @fda={0x66646185, 0x7, 0x2, 0x1d}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x40}, @free_buffer, @increfs, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x1, 0x1, 0x22}, @fd, @flat=@weak_handle={0x77682a85, 0x101}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/40, 0x28, 0x1, 0x37}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/175, 0xaf, 0x2, 0x3d}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}, @increfs_done={0x40106308, 0x1}], 0x73, 0x0, &(0x7f0000000500)="8ce1ee0b5301815a2288557d8814fb96b9cb012224d816cdfe9572e651132498f87f607ddc3808ff04e30797e7bb573e0c330112139d7b954b02c25cf43cafa96e103d473b807a9b1e00a9750fe9734064cdb063243141ea9d23eb9319fffabf90959276bbf66f47d210d67c054d3e9b2c8f0b"}) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1092.967026] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1092.979793] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1092.998307] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f0000000000)="b4378e640585d97419755787cab8b0c1b714985803819fc7defcc7e8e73cec9bb890d69fbdb10d2d993c27a403f6112369ad40d46978b0fbd383ebb5d572424db8e2045bc2bce4c9482f64862883a937ffe9b0c5aa913fa87b22e2ec8a9bdc88dc7b3b6ec55671418e16c91904e106f459d5d78abe71d12d8b1f963a835355acda9772d333be1b3c1cf297b049eb60b31589e1e4729856e1bd462a96908b798dbd4e7e64533a36bd7128be24ff88a4da15b313e0c46de7c6609cba28d02fc1c54c7737aacdc5478a904579670f51b2a5eaacc4cfcdf160598adfa5", 0xdb}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000240)={{0xff, 0xf5}, {0xbb, 0x9}, 0x80000001, 0x2, 0x81}) [ 1093.013474] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1093.034305] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1093.054864] reason=80000021 qualification=0000000000000000 [ 1093.058284] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.079701] IDTVectoring: info=00000000 errcode=00000000 [ 1093.088731] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1093.092187] TSC Offset = 0xfffffdb4423d13ab [ 1093.122829] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1093.132876] EPT pointer = 0x000000009bd3701e [ 1093.133238] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1093.146929] Virtual processor ID = 0x0002 [ 1093.151413] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1093.151421] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1093.151429] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1093.151436] Interruptibility = 00000000 ActivityState = 00000000 [ 1093.151440] *** Host State *** [ 1093.151448] RIP = 0xffffffff8116426f RSP = 0xffff888064d279d0 [ 1093.151463] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1093.151471] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1093.151479] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1093.151490] CR0=0000000080050033 CR3=000000008a95b000 CR4=00000000001426e0 [ 1093.151500] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1093.151509] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1093.151512] *** Control State *** [ 1093.151517] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1093.151522] EntryControls=0000d1ff ExitControls=002fefff [ 1093.151531] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1093.151536] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1093.151541] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1093.151546] reason=80000021 qualification=0000000000000000 22:48:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1093.151551] IDTVectoring: info=00000000 errcode=00000000 [ 1093.151554] TSC Offset = 0xfffffdb425f9fef6 [ 1093.151560] EPT pointer = 0x0000000065db701e [ 1093.151567] Virtual processor ID = 0x0003 [ 1093.342628] *** Guest State *** [ 1093.345959] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1093.356153] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1093.365905] CR3 = 0x00000000fffbc000 [ 1093.370496] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1093.376534] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1093.383825] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1093.391222] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1093.399896] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.407932] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.416905] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.425498] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.434212] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.442867] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1093.451911] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1093.460461] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1093.468481] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1093.484679] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:48:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0xfffffffffffffee0) 22:48:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x9}, {0x0, 0xfffffffd}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1093.491557] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1093.508168] Interruptibility = 00000000 ActivityState = 00000000 [ 1093.525262] *** Host State *** [ 1093.533110] RIP = 0xffffffff8116426f RSP = 0xffff8880601979d0 [ 1093.548535] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1093.575659] *** Guest State *** [ 1093.580607] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 22:48:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)) 22:48:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, {}, {}, {0x5}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2a}) 22:48:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000080)=""/32, &(0x7f00000000c0)=0x20) r3 = dup(r1) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$RTC_PIE_ON(r5, 0x7005) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000000)={0x2, 0x3f}) [ 1093.594841] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1093.618022] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1093.630890] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$poke(0xd5ba241bc4c5b7d0, r1, &(0x7f0000000000), 0x1) [ 1093.642442] CR0=0000000080050033 CR3=000000008c194000 CR4=00000000001426e0 [ 1093.662884] CR3 = 0x00000000fffbc000 [ 1093.668033] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1093.681548] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1093.691992] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 22:48:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) 22:48:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x400, 0x6, 0x1, 0x1, 0x3, [{0x0, 0x1ff, 0x3f, [], 0xd02}, {0x9, 0xb7, 0x1, [], 0x4002}, {0x9, 0x9, 0xdb, [], 0x800}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x101400, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000340)={0x10000, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0]}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) eventfd(0x200) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1093.704614] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1093.723077] *** Control State *** [ 1093.736994] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1093.745605] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1093.761210] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1093.771267] EntryControls=0000d1ff ExitControls=002fefff [ 1093.781475] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1093.792150] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000002c0)="8411ac9e95b2a6801dfcf6d8fe5dabe0046e2168c0e68c05000000b66283f66571e754ec3ed52dad078b6adac167dc99d2697c4fbc4480e692f8b22b74a7cace5fdd84584a68d514000001009c5052012d", 0x51}], 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8a0b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x98e900, 0x0, 0x0, 0x0, &(0x7f0000000040)="d35f7e258a178471000000000020f60ab6") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x800) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1c8b, 0x220400) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000400)={0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x140, 0x13, 0x800, 0x70bd2c, 0x25dfdbfc, {0x4, 0x0, 0x1, 0x6e, {0x4e20, 0x4e20, [0x2, 0x6, 0x6, 0x3], [0xffffffff, 0x8, 0x8001, 0x3], r2, [0x5e44, 0x8]}, 0x1, 0x47d1d88d}, [@INET_DIAG_REQ_BYTECODE={0x77, 0x1, "ef03c3ed54467fec6c3ab844ba85b25a195ff9baf00dcf0bef5c54b779056e2b2c89ac29c16111ed1df0e6816ace64ba93bb09e6deab37739510bbf26d1fc5cc0c84316cde85f71825aa296cf08ed2297be4b457e22e0ccb1e6bc20a0343355c59a433afd23af8c9a4caadbc2f65160cf7c5e0"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "c155ed5d33376389f699833425fe282082bb72880cf3bb39c19541732f12912bbad023cf00d0867b914ad7e593aeac9913ab3b5d5698407c1230b5bb28fe7268dea5418a193504c569805b3ba58bae21787fb656e23f845af454b5c587906a96ff94e4592317cdc079ce5639d478f2299956b7b48fa42b"}]}, 0x140}}, 0x44015) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1093.810745] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1093.821943] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.836336] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1093.854723] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.865526] reason=80000021 qualification=0000000000000000 [ 1093.874469] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1093.885462] IDTVectoring: info=00000000 errcode=00000000 [ 1093.895721] TSC Offset = 0xfffffdb3d52ada5e [ 1093.901005] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0xa, 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000080)={0xfff, "477e2c11faa66f8a3fec1c1f76682ae74f4fcf16fdb7c7cd8bae4c733939342b", 0x1}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCRSACCEPT(r3, 0x89e3) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sync() fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x2) 22:48:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5fed}, {}, {0x0, 0xf61}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a, 0x0, r4}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0xc8201) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000011c0)={r6}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r6, 0x40, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r7}, 0x10) [ 1093.909771] EPT pointer = 0x000000008a51c01e [ 1093.914358] Virtual processor ID = 0x0002 [ 1093.920364] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1093.929963] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1093.938649] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1093.991685] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1094.012153] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1094.025480] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 22:48:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010056}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1410, 0x20, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1094.054336] Interruptibility = 00000000 ActivityState = 00000000 [ 1094.054546] *** Guest State *** [ 1094.065936] *** Host State *** [ 1094.086982] RIP = 0xffffffff8116426f RSP = 0xffff888064d279d0 [ 1094.099008] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1094.107575] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1094.131863] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1094.132760] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1094.146613] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1094.157643] CR0=0000000080050033 CR3=00000000a104d000 CR4=00000000001426e0 [ 1094.173873] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1094.184639] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1094.192010] CR3 = 0x00000000fffbc000 [ 1094.196357] *** Control State *** [ 1094.200987] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1094.205814] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1094.215433] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1094.216625] EntryControls=0000d1ff ExitControls=002fefff [ 1094.233618] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1094.236047] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1094.248803] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1094.252577] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1094.264906] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1094.267207] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.276580] reason=80000021 qualification=0000000000000000 [ 1094.287219] IDTVectoring: info=00000000 errcode=00000000 [ 1094.294942] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.297076] TSC Offset = 0xfffffdb3b6479b1e [ 1094.308680] EPT pointer = 0x000000008eecc01e [ 1094.312356] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.322600] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.325733] Virtual processor ID = 0x0003 22:48:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 22:48:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000240)={0x301, 0x2, &(0x7f0000000080)=[0x71, 0x81], &(0x7f00000000c0)=[0x3ff, 0x3], &(0x7f0000000100)=[0x0, 0x400], &(0x7f0000000140)=[0x5, 0x0], 0x0, 0xffffffffffff7fff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1094.349553] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:39 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r1 = userfaultfd(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400601, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) userfaultfd(0x80000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cryptd(pcbc(aes)),blake2s-160-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) [ 1094.393498] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1094.417720] *** Guest State *** [ 1094.420824] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1094.445280] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1094.458904] IDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0xa6d2, 0x0, 0x200, 0xe7f, 0x6, 0xfff}) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0xa20000, 0x5, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x990a90, 0x0, [], @p_u8=&(0x7f0000000240)=0x1}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000300)=[@mss={0x2, 0x4}, @mss={0x2, 0xee9}], 0x2) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0x4}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="47000000000000000000000016000000007b4c9300000000"]}) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1094.490056] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1094.500855] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1094.516810] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1094.523780] CR3 = 0x00000000fffbc000 [ 1094.523817] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) [ 1094.523855] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1094.523936] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1094.523959] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1094.545943] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 1094.572119] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1094.589650] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.605135] Interruptibility = 00000000 ActivityState = 00000000 [ 1094.606849] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.626027] *** Host State *** 22:48:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1094.626146] RIP = 0xffffffff8116426f RSP = 0xffff8880557c79d0 [ 1094.626268] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:48:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000000)=""/185, 0xb9, 0x0, &(0x7f0000000180)=@llc={0x1a, 0x13, 0x80, 0x8, 0x2, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) 22:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={r4, &(0x7f0000000280)=""/4096}) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x1, "81fce80610ff6a6d"}) 22:48:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1094.626347] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1094.626405] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1094.626466] CR0=0000000080050033 CR3=000000008bc20000 CR4=00000000001426f0 [ 1094.626525] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 22:48:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1094.626558] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1094.626583] *** Control State *** [ 1094.626599] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1a614beab760000036c64b2f76923aa4741ca6dd052100000000ffff2e41bac8d1e83ecf8c0d0879d38efc06850000ffffffe95eafc2ca385c5d3a1a18b3bc6228e89af081643a5badc9e00063ec3ef57dc756e0db2b26124c377f2f454dd475ac5b642dbf656838d6652dd00c17a26d186573a05f768cb9e8a1dc970553bfa4374ed5989a263c6966a8c8daf9cd2dddc063d85c1108c05e3f8fa4a0c2a3f1ae4d8dc0e3d8630a8afb8ecb74"]}) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, r4, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8004) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000800}, 0x48000) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xc4, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x91}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa469}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x40010) [ 1094.626665] EntryControls=0000d1ff ExitControls=002fefff [ 1094.626705] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1094.626724] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1094.626743] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1094.626759] reason=80000021 qualification=0000000000000000 [ 1094.626805] IDTVectoring: info=00000000 errcode=00000000 [ 1094.626819] TSC Offset = 0xfffffdb3760ea3f8 [ 1094.626884] EPT pointer = 0x00000000a525501e [ 1094.626924] Virtual processor ID = 0x0002 [ 1094.684313] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.684410] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.684480] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.684525] GDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000280)={0x7, 0xfffd, 0x40, 0x4, 0x11, "2e2ab026acafe568"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000180)={0x1}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x7) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0x1248}, 0x1, 0x0, 0x0, 0x10}, 0x24040011) [ 1094.684641] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1094.684679] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1094.684721] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1094.684759] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1094.684781] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1094.684942] Interruptibility = 00000000 ActivityState = 00000000 [ 1094.684978] *** Host State *** [ 1094.685000] RIP = 0xffffffff8116426f RSP = 0xffff88806767f9d0 [ 1094.685062] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1094.685213] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1094.685267] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1094.685278] CR0=0000000080050033 CR3=00000000979fa000 CR4=00000000001426e0 [ 1094.685292] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1094.685350] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1094.685364] *** Control State *** [ 1094.685373] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1094.685391] EntryControls=0000d1ff ExitControls=002fefff [ 1094.685411] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1094.685425] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1094.685451] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1094.685465] reason=80000021 qualification=0000000000000000 [ 1094.685490] IDTVectoring: info=00000000 errcode=00000000 [ 1094.685541] TSC Offset = 0xfffffdb343942059 [ 1094.685559] EPT pointer = 0x00000000a90ee01e [ 1094.685640] Virtual processor ID = 0x0003 [ 1094.785732] *** Guest State *** [ 1094.785754] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1094.785775] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1094.785793] CR3 = 0x00000000fffbc000 [ 1094.785807] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1094.785853] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1094.785924] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1094.785945] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1094.786006] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.786085] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.786146] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.787532] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.787670] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.787728] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1094.787809] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1094.787868] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1094.787950] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1094.787988] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1094.788048] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1094.788069] Interruptibility = 00000000 ActivityState = 00000000 [ 1094.788082] *** Host State *** [ 1094.788188] RIP = 0xffffffff8116426f RSP = 0xffff88806308f9d0 [ 1094.788271] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1094.788330] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1094.789499] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1094.789768] CR0=0000000080050033 CR3=0000000064bab000 CR4=00000000001426e0 [ 1094.789848] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1094.789907] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1094.789920] *** Control State *** [ 1094.789949] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1094.789967] EntryControls=0000d1ff ExitControls=002fefff [ 1094.790008] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1094.790026] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1094.790046] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1094.790064] reason=80000021 qualification=0000000000000000 [ 1094.790126] IDTVectoring: info=00000000 errcode=00000000 [ 1094.790141] TSC Offset = 0xfffffdb310d109c5 22:48:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1, &(0x7f0000000280)=""/184, 0xb8}, 0x100}], 0x1, 0x100, &(0x7f00000001c0)={0x0, 0x3938700}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xffffffffffffffc2) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1094.790206] EPT pointer = 0x000000009314401e [ 1094.790245] Virtual processor ID = 0x0002 [ 1094.872365] *** Guest State *** [ 1094.872412] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1094.872455] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1094.872534] CR3 = 0x00000000fffbc000 [ 1094.872543] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1094.872603] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xd3ba}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010300000000000000000c000000080003bba486ad0b528369d2a0c8a97bb83700", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r6, 0x917}, 0x14}, 0x1, 0x400300}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r6, 0x208, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @private=0xa010100}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0x2, 0x2, {}, {0xffffffffffffffff}, 0xf8, 0x8}) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000200), &(0x7f0000000400)=0x4) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000080)=0x2) ptrace$setopts(0x4206, r1, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x2f, 0x1, @thr={&(0x7f00000000c0)="5c5f0873b350a1c4c20f1d89bd21526386a4f55bb51d27cfd158a3176a9f5c90ac7fb850c090274c9c0f6dc9e0096cfa5ecc08200bbb20033efa3a455d4e72ed11eb9efd65bad31fb7f531490e28af0e92c7a81efa36df114147dd236fb80d182b5efde4c2e2ac351a9c6a3849d982ec663658e4", &(0x7f0000000240)="a13467029dd98805b3d8673bc92cc0a516ce7307bb9447ace7bee0fe98a7c0e2124a8bafa6064612d788c06b0c7ac1a7f650f5ca9b9bea4b038ddaf6cf1148b24e0def65923cba53f31c04cadd092ec2085d84f33a6ff50e7db7566288b0e9de6e4c5a0688149a4b19487823657a66cf4dfb7e806747b228ef7e00c6942c0723da8323c26cf770dbe19d911d54e4c79135ddb80f1116d08f142aa6c71d42ba82a268b7350770f53301b396df2f66279f615ca12c8a00437b3b80172c4bb996ad2a8a137892579d1f3b2c94c593f2cc86b9f160c554cbe431381207a01ca64766eba474bbb93ef75054055ca0c63550f52572ac0a0cb9762c8d"}}, &(0x7f0000000040)) [ 1094.872730] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1094.872756] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1094.872838] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.872960] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.873019] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.873160] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.873436] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1094.873524] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1094.873583] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1094.873626] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1094.873707] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1094.873856] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1094.873914] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 22:48:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1094.873954] Interruptibility = 00000000 ActivityState = 00000000 [ 1094.873966] *** Host State *** [ 1094.874013] RIP = 0xffffffff8116426f RSP = 0xffff888063fef9d0 [ 1094.874133] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1094.874156] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1094.874215] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1094.874296] CR0=0000000080050033 CR3=0000000094c15000 CR4=00000000001426e0 [ 1094.874373] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1094.874415] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1094.874972] *** Control State *** [ 1094.875030] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1094.875048] EntryControls=0000d1ff ExitControls=002fefff [ 1094.875090] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1094.875110] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1094.875148] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1094.875168] reason=80000021 qualification=0000000000000000 [ 1094.875187] IDTVectoring: info=00000000 errcode=00000000 [ 1094.875202] TSC Offset = 0xfffffdb307924812 [ 1094.875237] EPT pointer = 0x000000009314401e [ 1094.875297] Virtual processor ID = 0x0002 [ 1094.947803] *** Guest State *** [ 1095.087383] *** Guest State *** [ 1095.174934] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1095.425895] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1095.455972] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1095.592955] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1095.610799] CR3 = 0x00000000fffbc000 [ 1095.725018] CR3 = 0x00000000fffbc000 [ 1095.753004] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1095.759103] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:40 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4a8002, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000002c0)=0xc) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffdf) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000001c0)={{r3}, 0xbf93, 0xffffffffffffffc1, 0x44a}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) [ 1095.765118] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1095.774167] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1095.785505] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1095.786047] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000000)={0x32, "b9ffa444b033b480562b3d6d966ac2f5860ec3ca8d4bfe0368bdbac1819a830e", 0x1, 0x1ff, 0x5, 0x1000000, 0x4}) 22:48:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}) r1 = socket(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="18ba25946ed5e406a25a100040", @ANYRES16=r5, @ANYBLOB="20002dbd7000fcdbdf2503000000060001004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:48:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x5d299509e2f2f4ab) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0xf0) [ 1095.817764] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1095.820258] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.854843] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1095.855688] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.884549] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1095.904820] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.918437] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.924612] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.946204] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.957895] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1095.979127] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.984894] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1095.987099] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1095.987115] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.001263] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.024697] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.030827] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1096.033084] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1096.049779] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.050488] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1096.058071] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1096.074376] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1096.075090] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1096.081675] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1096.089668] Interruptibility = 00000000 ActivityState = 00000000 [ 1096.096678] Interruptibility = 00000000 ActivityState = 00000000 [ 1096.105512] *** Host State *** [ 1096.108603] *** Host State *** [ 1096.112005] RIP = 0xffffffff8116426f RSP = 0xffff8880565879d0 [ 1096.114560] RIP = 0xffffffff8116426f RSP = 0xffff888057f179d0 [ 1096.114575] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1096.114584] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1096.120788] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1096.129047] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1096.138210] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1096.141478] CR0=0000000080050033 CR3=000000009454f000 CR4=00000000001426e0 [ 1096.147321] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1096.153761] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1096.161821] CR0=0000000080050033 CR3=0000000090d30000 CR4=00000000001426f0 [ 1096.172001] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1096.174088] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1096.181534] *** Control State *** [ 1096.187790] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1096.197983] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1096.200630] *** Control State *** [ 1096.204604] EntryControls=0000d1ff ExitControls=002fefff [ 1096.210213] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1096.220674] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1096.225784] EntryControls=0000d1ff ExitControls=002fefff [ 1096.234502] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1096.239449] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1096.248240] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1096.251716] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1096.261840] reason=80000021 qualification=0000000000000000 [ 1096.265246] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1096.273276] IDTVectoring: info=00000000 errcode=00000000 [ 1096.278274] reason=80000021 qualification=0000000000000000 22:48:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(crc32,ecb-twofish-3way)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r7, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="100026bd8a00fcdbdf25160000007c0004802400078008000300010000000800040006000000080001001200000008000300ffffffff0c00078008000400ff0300000900010073797a30000000002400078008000200ff0300000800030080000000080003000000000008000300070000000940010073797a31000000000900010073797a3000000000"], 0x90}, 0x1, 0x0, 0x0, 0x18040}, 0x10) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000280)={"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"}) 22:48:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x181, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x800000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x34, 0x19, 0x2014, 0x1d, 0xb, 0x8001, 0x2, 0x20011c}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000080)) 22:48:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) exit_group(0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000100)=""/231) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0x3f, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r3, 0x4, 0x2000) [ 1096.288965] TSC Offset = 0xfffffdb2e56e0327 [ 1096.290804] IDTVectoring: info=00000000 errcode=00000000 [ 1096.296511] EPT pointer = 0x000000005e0ea01e [ 1096.300956] TSC Offset = 0xfffffdb2fbb137b6 [ 1096.311072] Virtual processor ID = 0x0003 [ 1096.315220] EPT pointer = 0x00000000a76fd01e [ 1096.324447] Virtual processor ID = 0x0002 22:48:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socket$phonet(0x23, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{}, {0x0, 0x3}, 0x0, 0xe, 0x19}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000340)={0x0, 0x300, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, {}, {}, {}, {0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) 22:48:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) fstat(r2, &(0x7f0000000180)) r3 = socket(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000002c0)=0xd73) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {r4}, 0x9, 0x9}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000080)) r5 = fcntl$dupfd(r1, 0x406, r1) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10, 0x80010, r5, 0x6) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x100}, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/38, &(0x7f0000000240)=0x26) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) [ 1096.457377] *** Guest State *** [ 1096.461774] *** Guest State *** [ 1096.469039] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1096.471186] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1096.493990] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x8000, 0x14a5, 0x1, 'queue1\x00', 0x4}) [ 1096.517714] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1096.531800] CR3 = 0x00000000fffbc000 [ 1096.535906] CR3 = 0x00000000fffbc000 [ 1096.539842] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1096.539954] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1096.553770] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1096.567157] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1096.575326] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1096.580355] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1096.590796] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1096.603017] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r2, 0x4, 0x0) [ 1096.617692] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1096.647559] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.658934] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000100)={0x20, 0x0, 0x2, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1096.663186] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.675933] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.688945] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.706799] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.714466] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.720614] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1096.734086] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.746424] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1096.747408] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.758444] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1096.781588] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1096.793802] Interruptibility = 00000000 ActivityState = 00000000 [ 1096.801753] *** Host State *** [ 1096.803828] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.805160] RIP = 0xffffffff8116426f RSP = 0xffff88805911f9d0 [ 1096.825336] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1096.832038] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1096.832193] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.842363] FSBase=00007f249f588700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1096.864700] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1096.874418] CR0=0000000080050033 CR3=0000000064440000 CR4=00000000001426f0 [ 1096.878618] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1096.891521] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1096.908348] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1096.911409] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1096.920706] *** Control State *** [ 1096.924190] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1096.926127] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1096.935435] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1096.946640] EntryControls=0000d1ff ExitControls=002fefff [ 1096.948960] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1096.954306] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1096.966613] Interruptibility = 00000000 ActivityState = 00000000 [ 1096.968311] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1096.975428] *** Host State *** [ 1096.975482] RIP = 0xffffffff8116426f RSP = 0xffff88806005f9d0 [ 1096.975571] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1096.975671] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1096.975825] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1096.975905] CR0=0000000080050033 CR3=000000008abaf000 CR4=00000000001426e0 [ 1096.975965] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1096.983423] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1096.991832] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1096.992424] reason=80000021 qualification=0000000000000000 [ 1096.999224] *** Control State *** [ 1097.006564] IDTVectoring: info=00000000 errcode=00000000 [ 1097.013198] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1097.023362] TSC Offset = 0xfffffdb22d900b68 [ 1097.027562] EntryControls=0000d1ff ExitControls=002fefff [ 1097.033694] EPT pointer = 0x000000005d60901e [ 1097.040637] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1097.050154] Virtual processor ID = 0x0003 [ 1097.092276] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1097.100025] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1097.106921] reason=80000021 qualification=0000000000000000 [ 1097.121168] IDTVectoring: info=00000000 errcode=00000000 22:48:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0xc80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x80000}, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x24240, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x45) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) fchmod(0xffffffffffffffff, 0x1c0) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000000)={0x2, {0x6, 0x6, 0x6, 0x3f}, {0x8001, 0x0, 0x6, 0xbb7}, {0x8, 0x9}}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x80, 0x3, 0x4, 0x0, 0xdbb, {0x77359400}, {0x1, 0x8, 0x3f, 0x0, 0x87, 0x9, "1360e231"}, 0xffffff00, 0x1, @fd, 0x8, 0x0, r1}) 22:48:42 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa4000) fcntl$setstatus(r0, 0x4, 0x0) 22:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x128, 0x0, &(0x7f0000000440)=[@register_looper, @increfs_done={0x40106308, 0x2}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/206, 0xce, 0x0, 0x16}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}, @free_buffer={0x40086303, r5}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x5, 0x2, 0x1}, @flat=@handle, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x40, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000856164660000000007000000000000000000000000030556452bc7028afb19a686f92f068a2a6571ccf7db986dd6bd0545e057c019aab72b2c1556de6cd59b40d4331b40c34748f2628ef1211dcfe22b18e2fb41022c4424af7695ffc0f7d2915570569e10fabf281fc37323d4e386cc2b0b580c2eb01008b2dc184333932c65acde0b331e"], &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @increfs], 0xbf, 0x0, &(0x7f0000000580)="d9b28e7ceda4fa0152eabbe81d904d54f74bca6617ff0ddfe562588127edcf8f5827a94862c4bdf0740f929b4d7b193cc788e2556e9cb240dae642cf465af21d93a58008dc7ca83139dc8f46c62a44aa662833b1dce09c2c74f0e2381d7c1e4e2ce25a0efb1bc7d662062de590cd559c6994a16a6a90ed367196754f7240ba04b616a2a87c01f19205712f0e38c0b1febe98a717e894d1a74ccb369d09d5e4dc9dd272ab565f8eb4d029a561792a90bd5cf0275fd410e9d79f72faff61f8a7"}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1097.126843] TSC Offset = 0xfffffdb22e7367cc [ 1097.132528] EPT pointer = 0x0000000094e6601e [ 1097.137005] Virtual processor ID = 0x0002 [ 1097.192355] audit: type=1400 audit(1594334922.068:25): avc: denied { set_context_mgr } for pid=12210 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 22:48:42 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r1 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000002c0)={0xc0000, 0x0, [0x8001, 0x80000003, 0x80000001, 0x80000002, 0x100, 0x80000004, 0x9, 0x80]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r6 = dup3(r0, r1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x8b, &(0x7f0000000000)="7df8f5fabe983b372075138441f8caa76c6a5af4978515a7669b79e0", 0x1c) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1097.241250] *** Guest State *** [ 1097.253027] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1097.267358] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.271191] *** Guest State *** [ 1097.276208] binder: 12210:12215 ioctl 40046207 0 returned -16 22:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x32569396dcb6a3bf) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1097.283824] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1097.291497] audit: type=1400 audit(1594334922.138:26): avc: denied { call } for pid=12210 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 [ 1097.304737] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1097.323585] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x70, &(0x7f0000000040)={r5}, &(0x7f0000000340)=0x8) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x70, &(0x7f0000000040)={r8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000400)={r5, 0x7f, 0x7fffffff, 0x6, 0x2, 0x1, 0x4, 0x9, {r8, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x6, 0x3, 0x4, 0x6, 0x8}}, &(0x7f00000002c0)=0xb0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a00000000000000001a00000004002280060021"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x84, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x19}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffe00}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x50ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6ca4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}, 0x84}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000380)={r6, 0x1}, &(0x7f00000004c0)=0x8) 22:48:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @local, 0x4e23, 0x2, 'ovf\x00', 0x8, 0x3, 0x7f}, 0x2c) fstat(r1, &(0x7f0000000180)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept4$packet(r4, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000000)={0x0, @ctrl}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x4b0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x7}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:42 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x7ff, 0x40}, &(0x7f0000000080)=0x8) [ 1097.359020] CR3 = 0x00000000fffbc000 [ 1097.362603] CR3 = 0x00000000fffbc000 [ 1097.385555] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1097.397775] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x3f, 0xfffffffa, r1, 0x0, &(0x7f0000000040)={0x9909e4, 0x9260, [], @string=&(0x7f0000000000)=0x80}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x2, 0x5}, @window={0x3, 0xffff, 0x4}, @window={0x3, 0x39, 0x3ff}], 0x3) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1097.402883] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1097.416539] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1097.432504] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1097.436614] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 22:48:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x20) [ 1097.464714] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1097.469417] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1097.487354] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.495128] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.500533] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)={0x100000000, 0x6, 0x2, 0x4, 0x3, [{0x80000001, 0x4, 0x1000, [], 0x200}, {0x6, 0x6, 0x100000001, [], 0x802}, {0x1a35d08b, 0x8, 0x2, [], 0x2808}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1097.517572] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.529961] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.540157] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.550271] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.550373] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.565644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1097.571390] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1097.584350] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000080)=0x2, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) 22:48:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x58261ac87cbfa65a, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0xffffea53, 0x5}, {0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x3}) [ 1097.606654] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1097.617697] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.622631] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1097.630266] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1097.656095] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1097.674974] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1097.676640] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1097.694203] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1097.716990] Interruptibility = 00000000 ActivityState = 00000000 [ 1097.722174] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1097.724227] *** Host State *** [ 1097.740960] RIP = 0xffffffff8116426f RSP = 0xffff8880931879d0 [ 1097.745803] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1097.747254] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1097.767836] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1097.773982] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1097.777218] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1097.782319] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1097.782332] Interruptibility = 00000000 ActivityState = 00000000 [ 1097.792714] CR0=0000000080050033 CR3=000000005cfbd000 CR4=00000000001426f0 [ 1097.796054] *** Host State *** [ 1097.807037] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1097.809878] RIP = 0xffffffff8116426f RSP = 0xffff8880565279d0 [ 1097.813386] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1097.819393] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1097.819402] FSBase=00007f249f588700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1097.819410] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1097.819420] CR0=0000000080050033 CR3=000000009a068000 CR4=00000000001426e0 [ 1097.819430] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1097.819443] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1097.819446] *** Control State *** [ 1097.819452] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1097.819457] EntryControls=0000d1ff ExitControls=002fefff [ 1097.819466] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1097.819472] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1097.819478] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1097.819482] reason=80000021 qualification=0000000000000000 [ 1097.819487] IDTVectoring: info=00000000 errcode=00000000 [ 1097.819491] TSC Offset = 0xfffffdb1b9ac1899 [ 1097.819497] EPT pointer = 0x00000000687b201e [ 1097.819504] Virtual processor ID = 0x0003 [ 1097.933994] *** Control State *** [ 1097.937678] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1097.946181] EntryControls=0000d1ff ExitControls=002fefff [ 1097.952629] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1097.959769] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 22:48:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {}, {}, 0x0, 0x100, 0x0, 0x72db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, r1) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, r2) keyctl$link(0x8, r1, r2) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1097.966438] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1097.974518] reason=80000021 qualification=0000000000000000 [ 1097.981247] IDTVectoring: info=00000000 errcode=00000000 [ 1097.986758] TSC Offset = 0xfffffdb1c05e2233 [ 1097.991149] EPT pointer = 0x00000000922b501e [ 1097.995550] Virtual processor ID = 0x0002 [ 1098.084807] *** Guest State *** [ 1098.099271] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1098.109355] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1098.120631] CR3 = 0x00000000fffbc000 [ 1098.127893] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1098.138007] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1098.146749] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1098.161212] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1098.171127] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.181122] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.190403] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.198945] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.207063] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.224232] GDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r4, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC], 0xfffffd2d) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x53240}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 22:48:43 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1098.232584] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1098.247667] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1098.265583] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1098.300212] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1098.316660] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1098.325254] Interruptibility = 00000000 ActivityState = 00000000 [ 1098.333569] *** Host State *** [ 1098.337027] RIP = 0xffffffff8116426f RSP = 0xffff88805cb679d0 [ 1098.343561] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1098.352437] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1098.360751] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1098.366850] CR0=0000000080050033 CR3=00000000a54e0000 CR4=00000000001426f0 22:48:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:48:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x56, 0x6, 0x0, {0x0, 0x800}, {0x1, 0x8000}, @const={0x8db, {0x7ff, 0x2, 0xc00, 0xfff8}}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getpeername$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x1}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007}) [ 1098.393251] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 22:48:43 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x22400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 22:48:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000080)={@private, @empty}, &(0x7f0000000000)=0x8) [ 1098.569711] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1098.594937] *** Control State *** [ 1098.607540] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r3}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r3, @ANYBLOB="08000b000300000008001900", @ANYRES32=r4, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r6, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r8, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, r6, r9}}, 0x6d) fchown(r0, r2, r6) [ 1098.624483] EntryControls=0000d1ff ExitControls=002fefff [ 1098.658830] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1098.678737] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1098.696369] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1098.721282] reason=80000021 qualification=0000000000000000 22:48:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x604800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000040)={{0x5, 0x1}, 'port1\x00', 0x89, 0x41010, 0x3, 0x2, 0x5, 0x10000, 0x9, 0x0, 0x4, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:48:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b911841750", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ustat(0xfffffffffffffffd, &(0x7f0000000080)) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1098.729402] IDTVectoring: info=00000000 errcode=00000000 [ 1098.735006] TSC Offset = 0xfffffdb14b9f56ba [ 1098.741420] EPT pointer = 0x000000008edf701e [ 1098.745995] Virtual processor ID = 0x0002 [ 1098.880999] *** Guest State *** [ 1098.895698] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1098.913844] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1098.929535] CR3 = 0x00000000fffbc000 [ 1098.935585] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1098.947253] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1098.953889] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1098.963346] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1098.972592] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.981653] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.990075] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1098.998103] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.006383] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.014935] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.023189] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1099.031587] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.039810] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1099.047854] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1099.054498] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1099.062443] Interruptibility = 00000000 ActivityState = 00000000 [ 1099.069237] *** Host State *** [ 1099.073492] RIP = 0xffffffff8116426f RSP = 0xffff88805a7179d0 [ 1099.083379] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1099.090264] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1099.116052] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1099.122874] CR0=0000000080050033 CR3=000000008d40c000 CR4=00000000001426f0 22:48:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) 22:48:44 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa8c00) fcntl$setstatus(r0, 0x4, 0x0) 22:48:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) pipe(&(0x7f0000000000)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x43}) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x28, 0x1}) 22:48:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r4}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r4, @ANYBLOB="08000b000300000008001900", @ANYRES32=r5, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r7, @ANYBLOB], 0x70}}, 0x20000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}}, 0x24004000) 22:48:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1099.139035] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1099.145841] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1099.153352] *** Control State *** [ 1099.156909] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b911841750", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0xffffffffffffffcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 22:48:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) 22:48:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b911841750", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:44 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d3"], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000040)=""/28) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r1, 0x4, 0x0) 22:48:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x5, 0x8) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1099.198028] EntryControls=0000d1ff ExitControls=002fefff 22:48:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1099.198106] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1099.198120] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1099.198159] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1099.198176] reason=80000021 qualification=0000000000000000 [ 1099.198189] IDTVectoring: info=00000000 errcode=00000000 [ 1099.198196] TSC Offset = 0xfffffdb0e00ac17e [ 1099.198210] EPT pointer = 0x000000005609901e [ 1099.198429] Virtual processor ID = 0x0003 [ 1099.315880] *** Guest State *** [ 1099.315901] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1099.315922] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1099.315935] CR3 = 0x00000000fffbc000 [ 1099.315962] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1099.315981] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1099.316024] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1099.316035] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1099.316123] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316204] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316261] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316686] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316728] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316766] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.316809] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316848] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.316917] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1099.316936] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1099.316957] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1099.316975] Interruptibility = 00000000 ActivityState = 00000000 [ 1099.317011] *** Host State *** [ 1099.317056] RIP = 0xffffffff8116426f RSP = 0xffff88805a7179d0 [ 1099.317134] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1099.317207] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1099.317246] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1099.317286] CR0=0000000080050033 CR3=000000008d40c000 CR4=00000000001426f0 [ 1099.317327] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1099.317366] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1099.317379] *** Control State *** [ 1099.317387] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1099.319087] EntryControls=0000d1ff ExitControls=002fefff [ 1099.319106] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1099.319117] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1099.319123] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1099.319145] reason=80000021 qualification=0000000000000000 [ 1099.319158] IDTVectoring: info=00000000 errcode=00000000 [ 1099.319164] TSC Offset = 0xfffffdb0a3b85c8c [ 1099.319199] EPT pointer = 0x000000008b01a01e [ 1099.319240] Virtual processor ID = 0x0002 [ 1099.455492] *** Guest State *** [ 1099.455526] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1099.455563] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1099.455577] CR3 = 0x00000000fffbc000 [ 1099.455596] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1099.455617] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1099.455682] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1099.455942] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1099.456029] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456089] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456149] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456209] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456270] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456307] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.456349] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456390] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1099.456427] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1099.456446] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1099.456486] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1099.456531] Interruptibility = 00000000 ActivityState = 00000000 [ 1099.456551] *** Host State *** [ 1099.456596] RIP = 0xffffffff8116426f RSP = 0xffff888063d579d0 [ 1099.456677] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1099.456696] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1099.456717] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1099.456756] CR0=0000000080050033 CR3=000000008cbdc000 CR4=00000000001426f0 [ 1099.456797] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1099.456818] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1099.456830] *** Control State *** [ 1099.456857] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1099.469838] EntryControls=0000d1ff ExitControls=002fefff [ 1099.469876] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1099.469895] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1099.469909] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1099.469936] reason=80000021 qualification=0000000000000000 [ 1099.469950] IDTVectoring: info=00000000 errcode=00000000 [ 1099.469975] TSC Offset = 0xfffffdb0901fef94 [ 1099.469993] EPT pointer = 0x000000005df7601e [ 1099.470149] Virtual processor ID = 0x0002 22:48:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x780, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x2}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000040)={0x1, 0x20, 0x0, 'queue1\x00', 0x7fffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x440, 0x0) 22:48:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b928490", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:44 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffff00c9401100000005ffffffffffff00a8ffffffffffffffffffff00003214f09a23a0daab1210d9ceda541c5303715f1a57d097bb56741a2be80295195e2d9ea58a19793410c1e71a86fe72e6ad55ef1504fdd2e1095a783e07fe5d2707c021f34270e4b7e6f79fe79a9ae816190fb908be4c7ccda90ee86a95398029f7ebbbdef3693aace39171496ca2c74bf19639872a535f8d6c847e85440279ba5c53b0537dea5e6ebe45d697f8222b799f5d67e9d0bb3756baf5efe3b5126cc62e97d0ee21d80d44298e2c"], 0xc9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101081, 0x0) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x940, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000280)=0x3) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x4ac, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xde, @mcast1, 0xf9d7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x604dbc72, @dev={0xfe, 0x80, [], 0x38}, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_NODE={0x240, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "cd028f9a4953a9a21bbbdb48eadf5bf9a8770f09b1a7ecc3bd75d35029741eaf8a5403c56acad6e60936e3841eca716490259268e64e832f8ec9db54d384b19563659563a836b4767391bad184aa7dc772f74697f483ff54d5e503fdf08016098b8843ef1124c7d186304764231f84d7ee179befff90bc5879e2646a16fbc5d686e8784ef8ceb058c79b5d625aed8392f7b04378c7212ae4526e027a3d403e36e9647008fb"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "1bc349e4b65fe4a63672379b0e31e09d354e091e3a42df805aca7e63263d72166c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "2c26c5a9d6dc35a2eca63c0e77750f37052fc09100df"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "df42e19bcbef354989150c1d6ef0d7a63a256d53"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "f9c254a0b5f3fc576f14a518efaf4f73b6fda344dd0012b7eab71dc84f4e28e257ca3af36b55b8c251fd48ef9d93aae65ad90c0cc0bcc510ea541020c4604c822b5ac77424bcf48bf0325ac2c873f3c01bde48bb363328421430dec2fb9c3f6a72bbb69785f1880268e4fae145c525fc6063367c96d5a3718f2bbc0deda4e9a6858d4987d1f27f24b92de3c7af465b1c2138fdbfe55f27270d851643390a0cd4f9ebaeca7204d882c73a8f83ad989d63cb"}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x90}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1f, @loopback, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4bb, @ipv4={[], [], @multicast1}, 0x1}}}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffafb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4000040}, 0x40011) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0xfffffffe, 0x75e, {r8}, {r4}, 0x9, 0x8}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000180)) 22:48:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes256, 0x4, [], "b4d6383d91c272a75f21537bdcf9aa2e"}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x4e8e], 0x1, 0x0, r5, r6}) 22:48:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000000)="702d9cdeb31dd8dd1929a8ce997bd1f6e9906721e4ede225ad71304e51ee2233593998b01535cf4e478615c378ce2ed8a960b199ca342b94bebc6601c6250d8d263c3bb37b59ca1d707688bb084218672346fc006f815142ae0dd141cb228261a561bb83e4d364bcc7ad0486b492ea0eefa92d61e2ff1fa8c9ab44ddea418154c14eb3ddc5fb99f572d9fe4effbc60834f00f0c1feb76aac59cc83caef12a5f5cac09590827f8fb1610d91273d77ea33e54932a145fc0e0e55f3f45743e328fb256d9f07ad54609a16d9d1f5c6f4e775d368dd93d061bee49aaf2ceb76c8be") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000000)=""/204) 22:48:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r2 = dup(r1) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1100.220191] *** Guest State *** [ 1100.223667] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1100.233337] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x3, 0x10000, &(0x7f0000000000)="817cd69de0d8edc3dd45be733cf22bd448688ede"}) [ 1100.269613] CR3 = 0x00000000fffbc000 [ 1100.283453] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:45 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x2, &(0x7f0000000040)) [ 1100.311572] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1100.317847] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1100.328111] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1100.370188] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.391998] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.412979] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.453641] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.484136] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1100.496013] GDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x11c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1403}, @CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x17}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x11c}}, 0x20004800) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x60, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}) [ 1100.518857] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1100.533260] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1100.564661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12502 comm=syz-executor.1 [ 1100.570202] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1100.587541] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1100.602686] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1100.602806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12502 comm=syz-executor.1 [ 1100.615301] Interruptibility = 00000000 ActivityState = 00000000 [ 1100.630639] *** Host State *** [ 1100.634012] RIP = 0xffffffff8116426f RSP = 0xffff8880931879d0 [ 1100.641658] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1100.649043] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1100.659589] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1100.666445] CR0=0000000080050033 CR3=00000000641c6000 CR4=00000000001426f0 [ 1100.679797] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1100.689755] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1100.703588] *** Control State *** [ 1100.707254] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1100.715853] EntryControls=0000d1ff ExitControls=002fefff [ 1100.722116] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1100.730317] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1100.737145] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1100.744729] reason=80000021 qualification=0000000000000000 [ 1100.752819] IDTVectoring: info=00000000 errcode=00000000 22:48:45 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b928490", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x8, 0x42000) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000001c0)) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) 22:48:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x402) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x3, 0x8}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x0, 0x81, 0x8, 0x4, 0x2, 0x200]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r6, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f02000000000000000001000000000000000c41f0000014001462726f6164636173742d6c696e6b1177"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'sit0\x00'}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000085) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000300)={0x100, 0x4, 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x76, r9}) 22:48:45 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x4000) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r1, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) [ 1100.763014] TSC Offset = 0xfffffdb026eda314 [ 1100.767490] EPT pointer = 0x000000008edf701e [ 1100.773209] Virtual processor ID = 0x0002 22:48:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x100000) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0xa0, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xffffffff, @mcast1, 0x2b}, @in6={0xa, 0x4e20, 0x100, @private2={0xfc, 0x2, [], 0x9}, 0x1}, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x40, @local, 0x8001}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e22, 0x2800000, @ipv4={[], [], @loopback}, 0x7ff}}, 0x9, 0x1000, 0xfffffffb, 0x3ff, 0x2, 0x8, 0x2}, &(0x7f00000001c0)=0x9c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0x35, 0x2}, 0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000003000000000000000f00000000000000647262675f70725f7368613338340000"], 0x30) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10ab94fd) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1100.894174] *** Guest State *** [ 1100.897547] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1100.919746] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1100.929609] CR3 = 0x00000000fffbc000 [ 1100.933461] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e1127e4d816f908ae61bf03d5256c7d20a0e35"}) 22:48:45 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-ce\x00'}, {&(0x7f0000000040)=""/111, 0x6f}, &(0x7f00000000c0), 0x43}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) fcntl$setstatus(r0, 0x4, 0x0) [ 1100.943485] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1100.955536] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1100.982845] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1101.016734] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.039212] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.059919] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.068056] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.077408] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.094664] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1101.106230] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1101.115459] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1101.129849] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1101.137978] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1101.146622] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1101.167019] Interruptibility = 00000000 ActivityState = 00000000 [ 1101.182735] *** Host State *** [ 1101.186009] RIP = 0xffffffff8116426f RSP = 0xffff88805e9cf9d0 [ 1101.192215] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1101.209479] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1101.217429] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1101.227609] CR0=0000000080050033 CR3=00000000641c6000 CR4=00000000001426e0 [ 1101.234929] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1101.245790] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1101.253091] *** Control State *** [ 1101.256602] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1101.274632] EntryControls=0000d1ff ExitControls=002fefff [ 1101.284216] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1101.308373] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1101.315107] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1101.338191] reason=80000021 qualification=0000000000000000 [ 1101.344598] IDTVectoring: info=00000000 errcode=00000000 [ 1101.368152] TSC Offset = 0xfffffdafca74de17 [ 1101.372652] EPT pointer = 0x000000004f91501e [ 1101.377159] Virtual processor ID = 0x0002 22:48:46 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b928490", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:46 executing program 3: exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) 22:48:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:46 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x3c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x3}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f7796fa2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b", @ANYRES16=r2, @ANYBLOB="02002bbd7000ffdbdf250200000c080002312836c0b42097931c21fdab5a1eb3e475f2"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020028bd7000fbdbdf250202000100000008000100020000004c0004800800020003000000d5000c80e40005000000000000000000fff7000000"], 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c010) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000013eadca4065d99ad7cdb3c37ab60ea42c17d13f556290686e833613c69010b0dbf0deeb202cfa4be092eaaf2142f7974f7c1f988377bdb0307c6804b4f589d214017c5217cae84989241b08e8ed62157eb51c25fe000000003bae4c88bad50000000000", @ANYRES16=r2, @ANYBLOB="00032cbd7000fbdbdf2502000000080001000300000008000200060000001c0108801c00078008000600f900000054000780080005009ce7951908000500856f8165080006005b00000008000600a0000000080005003f6c6852080005001ed4602e08000500a5124e2208000600e000000008000500af11974808000600cb000000340007801c0007800800050057a4520d080006007f0000000800050073fa0f77040007802400078008000600dc0000000800060040000000080005009c9a9172080005001a46ee622c000780080005003e58a23b08000500f42337300800060052000000080006004a000000080005008411514c1400078008000500a863b06008004b0000000000"], 0x140}, 0x1, 0x0, 0x0, 0x4004804}, 0x20044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x1b4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9abb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x105f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e6524ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42a74475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c1d2d0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e11d6c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42876c22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f75543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14378d34}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6562eb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x231a3a29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428f1395}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3137}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1173dfa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c68dea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d11c120}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd9c2e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25abb36d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1242b9c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefcb8e0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616f4c0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158c3f91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ec4792}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8d80d1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245f9576}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682c4067}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d4d31d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d31dff5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x141aa403}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22aa0963}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012abd7000fcdbdf25e1ffffff0700010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffff8, &(0x7f0000000040)={&(0x7f00000008c0)={0xb8, r2, 0x400, 0x70bd2d, 0x25dfdbff}, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200028bd7000ffdbdf250400000104000000000000003400048005000300000000000500030005000000050003000200000005000300060000000500030006000000080001000300000008000100ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x20080000}, 0x40880) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c0, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b6f8b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f99ae34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x690babf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7382}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7771707a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49d48db0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3346b431}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c810a30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x134a70f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7435d7f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636d6af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a53}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x184a9509}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x129d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2dbfa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54375d49}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fdc44b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d24852a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x453bf574}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54bfd07d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7342}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe429}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6945fc1c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1143}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ac40ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37a22ae6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f0e32c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2fac04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48f00ab5}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa97e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9896b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f677a64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69830a6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7041}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bb2de59}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x880}, 0x4004000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fcdbdf250400000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4a4, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bd38ca2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x465f9a33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d5497d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285cb716}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fa7a8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3794637b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d7e4d1}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da1f9fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5945c8a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55181d0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c1652e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a40572}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0e25bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ada4b03}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dedca5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27606dd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12721582}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b7086c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e46195c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13512cd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b86b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x988b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c696899}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e63928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x88ce562}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63289759}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a98513}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xff51a91}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f420979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x411a41b1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a7c38a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f6be5b8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e619f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69c3a9df}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3152fac6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6434daed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x572e3614}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d40d406}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x113b8719}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28a32a76}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e33ad60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x199812c2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42849961}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f55fd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2877dc60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73cc6733}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143c4199}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6beb896c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3316f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b48529c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d64c12a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7faf32f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x640ff857}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b8e51ff}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f7bfcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2551d54f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e8f91b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f15710e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x268b853}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5193087}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d1135eb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a11bea5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41eea327}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2f3ba}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a5a757f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70afe163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d171e1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x355054cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60611604}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20040004) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r2, @ANYBLOB="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"], 0x52c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44081) 22:48:46 executing program 3: exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1101.515572] device lo entered promiscuous mode [ 1101.527115] *** Guest State *** [ 1101.538310] Y­4`Ò˜: renamed from lo [ 1101.546825] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:46 executing program 3: exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1101.585568] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1101.612153] CR3 = 0x00000000fffbc000 [ 1101.620593] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:46 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) 22:48:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:46 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1101.634640] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1101.655303] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1101.692256] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1101.722069] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}) [ 1101.746270] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:46 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1101.787075] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.807581] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.839353] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1101.862862] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1101.891842] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1101.908731] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1101.919503] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1101.928604] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1101.935295] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1101.944255] Interruptibility = 00000000 ActivityState = 00000000 [ 1101.957336] *** Host State *** [ 1101.961482] RIP = 0xffffffff8116426f RSP = 0xffff88805a2df9d0 [ 1101.967890] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1101.975960] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1101.988251] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1101.997486] CR0=0000000080050033 CR3=0000000091e23000 CR4=00000000001426e0 [ 1102.011209] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1102.018218] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1102.024405] *** Control State *** [ 1102.029328] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1102.036127] EntryControls=0000d1ff ExitControls=002fefff [ 1102.043482] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1102.051571] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1102.059042] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1102.065768] reason=80000021 qualification=0000000000000000 [ 1102.073534] IDTVectoring: info=00000000 errcode=00000000 [ 1102.079625] TSC Offset = 0xfffffdaf77020972 [ 1102.084104] EPT pointer = 0x000000009ffee01e 22:48:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:47 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x360, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {}, {}, {}, {}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0x5}, 0x8) [ 1102.090372] Virtual processor ID = 0x0002 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1102.215262] *** Guest State *** [ 1102.226745] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1102.243030] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1102.252608] CR3 = 0x00000000fffbc000 [ 1102.256577] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0xc6}, &(0x7f0000000040)=0x8) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1102.266225] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1102.285456] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1102.295927] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1102.314044] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.324172] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.342386] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.352415] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.361877] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.378144] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1102.393295] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:48:47 executing program 4: readv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1102.413395] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1102.430203] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1102.439080] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1102.461994] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1102.478127] Interruptibility = 00000000 ActivityState = 00000000 [ 1102.490333] *** Host State *** [ 1102.496648] RIP = 0xffffffff8116426f RSP = 0xffff888059e279d0 [ 1102.504191] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1102.528692] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1102.536551] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1102.558405] CR0=0000000080050033 CR3=0000000095480000 CR4=00000000001426e0 [ 1102.565496] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1102.579204] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1102.591518] *** Control State *** [ 1102.595219] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1102.603144] EntryControls=0000d1ff ExitControls=002fefff [ 1102.614375] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:48:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 22:48:47 executing program 4: readv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1102.624267] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1102.635670] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1102.643283] reason=80000021 qualification=0000000000000000 [ 1102.654310] IDTVectoring: info=00000000 errcode=00000000 [ 1102.660801] TSC Offset = 0xfffffdaf1750a55e [ 1102.665287] EPT pointer = 0x0000000064baa01e [ 1102.674687] Virtual processor ID = 0x0002 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 1102.771811] *** Guest State *** [ 1102.783196] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1102.820535] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1102.850006] CR3 = 0x00000000fffbc000 [ 1102.859802] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1102.873087] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1102.886685] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1102.902903] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1102.921755] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.939782] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1102.960262] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:47 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22:48:47 executing program 4: readv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1102.977712] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1103.008440] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) sync_file_range(r0, 0x6c2bb405, 0x6, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000340)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400}, {0x0, 0xffffffff}, {}, {0x0, 0xffff8000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000080)={0xb, 0x8, 0x2}) [ 1103.020934] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1103.052848] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1103.080202] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1103.092176] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1103.111145] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1103.121436] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1103.129408] Interruptibility = 00000000 ActivityState = 00000000 [ 1103.135665] *** Host State *** [ 1103.148004] RIP = 0xffffffff8116426f RSP = 0xffff88805c3579d0 [ 1103.154421] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 1103.172111] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1103.180538] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1103.186519] CR0=0000000080050033 CR3=0000000054043000 CR4=00000000001426e0 [ 1103.203684] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 22:48:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r4}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r4, @ANYBLOB="08000b000300000008001900", @ANYRES32=r5, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r7, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg1\x00', r4}) 22:48:48 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 1103.218436] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1103.224524] *** Control State *** [ 1103.229916] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1103.237460] EntryControls=0000d1ff ExitControls=002fefff [ 1103.262991] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1103.278386] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1103.299949] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:48:48 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b9284906735", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x20000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1103.319651] reason=80000021 qualification=0000000000000000 [ 1103.327765] IDTVectoring: info=00000000 errcode=00000000 [ 1103.334464] TSC Offset = 0xfffffdaec96cb0d9 [ 1103.340802] EPT pointer = 0x00000000617d201e [ 1103.345353] Virtual processor ID = 0x0002 22:48:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0xffffffffffffffb9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:48 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x80, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000440)="78281aeb3e94347ad394325d785233b7", 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000480)) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0x401, 0x2, r1, 0x0, &(0x7f00000000c0)={0xa20ab1, 0xcf5, [], @p_u8=&(0x7f0000000080)}}) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='/dev/fb0\x00') 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:48:48 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x20000}, {0xa, 0x0, 0x0, @private0}, r3}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r3, 0x0, "862832", "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"}}, 0x110) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x58) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 22:48:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, r1) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="009b9a701e187f6e583167f166e49c60ef4b57bb6f1e3e1f5180af69d71f0b10b213a9c28340373688f6ea5201a1b0fcd13738c8fe1a14004c6ef84eedfb9d249dcebcdeda6f1d8a08ea1503a581d96293b59f012f15be4378c83cd5229a4a466a2676fa5eefc9e568f5", 0x6a, 0xfffffffffffffffb) keyctl$reject(0x13, r1, 0xb9, 0xa5, r2) [ 1103.541799] *** Guest State *** [ 1103.560032] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) [ 1103.620450] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1103.651343] CR3 = 0x00000000fffbc000 [ 1103.660434] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1103.680737] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1103.700849] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1103.732713] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1103.759831] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1103.778154] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1103.786235] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1103.817961] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1103.826160] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1103.847943] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1103.856466] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1103.872523] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1103.882897] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1103.894600] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1103.904698] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1103.915669] Interruptibility = 00000000 ActivityState = 00000000 [ 1103.923744] *** Host State *** [ 1103.927174] RIP = 0xffffffff8116426f RSP = 0xffff88805c3579d0 [ 1103.936605] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1103.943937] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1103.955060] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1103.962107] CR0=0000000080050033 CR3=0000000054043000 CR4=00000000001426f0 [ 1103.970510] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1103.977249] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1103.983942] *** Control State *** [ 1103.987418] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1103.994377] EntryControls=0000d1ff ExitControls=002fefff [ 1104.000063] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1104.006985] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1104.013775] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1104.020523] reason=80000021 qualification=0000000000000000 [ 1104.026873] IDTVectoring: info=00000000 errcode=00000000 [ 1104.033033] TSC Offset = 0xfffffdae63c86cdc 22:48:48 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm64\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000180)) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000000c0)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "7b4c93"}}) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044080) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:48 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) tee(r0, r1, 0x1ff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) 22:48:48 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x44, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@null=' \x00', 0xe, 'vlan0\x00'}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r2, 0x4, 0x0) mlockall(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) userfaultfd(0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r5}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="700000003251ddd6032dd9d600625f83000d0000012684174c0b925227e229a6f3c7647000f52c0a69a884909d2e746660770920d061d200"/69, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08040484", @ANYRES32=r5, @ANYBLOB="0800366fd40075aceac3507febcee00200000008000a00", @ANYRES32=r6, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r8, @ANYBLOB], 0x70}}, 0x20000001) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000001c0)=r5) [ 1104.037417] EPT pointer = 0x0000000091f7101e [ 1104.041938] Virtual processor ID = 0x0002 22:48:48 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x2c, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) 22:48:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) fanotify_mark(r3, 0x8c, 0x0, r1, &(0x7f0000000080)='./file0\x00') ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@netrom) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f00000000c0)={{0x94, 0x46}, {0xab, 0xc0}, 0xfffffffe, 0x6, 0xc0}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0xffffffa3) [ 1104.134712] *** Guest State *** [ 1104.152067] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1104.172551] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) [ 1104.196105] CR3 = 0x00000000fffbc000 [ 1104.203813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=12783 comm=syz-executor.5 [ 1104.223430] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) [ 1104.252210] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1104.267208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=12814 comm=syz-executor.5 [ 1104.285832] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1104.307864] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1104.337365] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1104.364204] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1104.381846] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1104.403928] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1104.420790] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1104.434080] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1104.442379] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1104.460050] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1104.470200] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1104.480385] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1104.486920] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1104.496491] Interruptibility = 00000000 ActivityState = 00000000 [ 1104.505064] *** Host State *** [ 1104.510754] RIP = 0xffffffff8116426f RSP = 0xffff888060a179d0 22:48:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:49 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x800) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x8000, 0x800c, 0x1, 0x2, r3}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x1f, 0x0, 0x1000, 0xa5, 0x4, 0x8a, 0x347b, r4}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1a, 0x4) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$setlease(r5, 0x400, 0x2) 22:48:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8}]}, 0x24}}, 0x0) [ 1104.516959] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1104.525706] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 1104.536145] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1104.566044] CR0=0000000080050033 CR3=000000005ee66000 CR4=00000000001426f0 [ 1104.586419] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1104.611969] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1104.625375] *** Control State *** [ 1104.644931] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1104.663744] EntryControls=0000d1ff ExitControls=002fefff [ 1104.675056] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1104.686505] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1104.694189] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1104.705096] reason=80000021 qualification=0000000000000000 22:48:49 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 1104.713071] IDTVectoring: info=00000000 errcode=00000000 [ 1104.722851] TSC Offset = 0xfffffdae0ef82817 [ 1104.727312] EPT pointer = 0x000000008e6fe01e [ 1104.733536] Virtual processor ID = 0x0002 22:48:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) 22:48:49 executing program 5: flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/142, 0x8e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x6, [@var={0x8000000f, 0x0, 0x0, 0xe, 0x3}, @volatile={0xf}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0xb966}, {0x7, 0x3}, {0x6}, {0x1, 0x4}, {0xd, 0x2}, {0x6, 0x1}, {0x10}, {0xf, 0x1}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x3, 0x5}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x61]}}, &(0x7f00000001c0)=""/157, 0xfa, 0x9d}, 0x20) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r5}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x0, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x4001) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r6}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r6, @ANYBLOB="08000b000300000008001900", @ANYRES32=r7, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r9, @ANYBLOB], 0x70}}, 0x20000001) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x12d4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x109c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "95b6abb1569d07bd71a72b17006ab20325b3410928b1d37da06386f766c4d206298fb5265a1ba2f36ae681bcc715ab87519c351974aff1564b0c44fbb59eb9195981f6fc089b19a4a2333d3b966e180ec3b10b06a11ad382a1c739504b0138e8072387745c0bbffb8d907170a4e85e361e9bdb2cc13f6f794d4ad60dd723bfca89d0dd87659711a59ff0199fdc4dfa0ebd02cf07f092e3645c28fcc44fb9892949640bc84832f371c032af61e309937e60908d0172f2bbaba538af594394371a20ff19b9a818438196d87fa9d3c50424fc83cfa38ad984d474f2f4b47d98567c5264ebb5e3dc535128be4ba63ac1ebde0b0484ba15158b082556256d2e9df84caafd716ee3693f7a9c81cd062cd9a38a771091c5922c32a413773ac71ec7054d328d8ad1223e8beb01149df3c9c9987c3126cd4c45004d16d9a6eb528e40393cf04c9288181cf8d8f421409da0ce85bbdc52b42d5ca5f6b927e76e1215fb129d6b85245434807e35faefd458d61f09368c50a865cb98cf73318c2008273de41edd7656ac75b37b1ee8567de96900b65e695f4c123993720445b11f2449c63f5885defb1616815a4d2dab2c3a2c1ae4f6960bfd413dae1211812fafa97fc10463012bb7ec61339bf20adcacb4fa5fe975eea2241a0e7b564fc8e0f6a639e1e8b4698f4c1364edff4731c225c35b95a9bd8bde590cada51f60195252f066e8417ecd32c09a2e9f83fe1a38703b25c7ae3d7b4686cbd609ce9fd538ad3010799e3a0dfa5ae60fef21c41000f90fde825c114eaee3052e98fcddbed9ce64020965e20bb439b19c40bcbf497c66d388ec2c6ea23317d1aed62510da330ea7844d741b7288040aca6462686053ff6e7dc7fe3751ac8f4d0507fe1f9880e73a1da92633c6427703816d8c3959b248e81ed2c435ba1290cb5c670ac62b2c523288221a10e0605b54ad5237143782ecb59361d4020991e59d30e904fc1466fb783b6502eb1a1d805a4cfca9a0a1f29f5392ddf823fedc58792cd1ace83de1e984d7ba2a7346cc2a89b12021f640e180d2f433efa5b739963da547525c6f2e87747de4bff32197a6a23ea017e092c9b336faf967a20f5a34338dea4b2936c992b3cf5de1cf3d95ff2fe41a8a647754e281f5149e9abedc9ee5bf94c496b604b577a834ffae753a64c6e281e9259c0a800926ede770e7906e4fc72848e1156fea95708139d76c14a2fb3bee51c291a83a3a8128d7eb2b034d9737fd0976df9b1a1e36821431c5db7db28c90f2ff333673b003b5255759948ebc03cf8365e04404d628570fb4814c9ba8e8543fffe86bc9f2010ddef762958db8f9a40c5efba59401b1a5ff3f882ee5191daf1ffeebe9bed198449b8f3bc3834bf21c70da2cc2fbc69076fbd5995589ce2ca8ef943ebaca53858e1893d292de641c242466a75f05ca99348b7583b350adbeff947f079c69b48f61da55fe1fd8e35050b2980f417233f7fe5d68cdc647966628dd5505e37d8c13b9d3d07161b00eaa3b6a52456dfb1b62ddc908290bef02d2bfdbf658dbc8100d51f28a8cce46116c02e10377effae7f2676cb5a3a72b9dee4a26621a86ab105c1fbeb51df3df7904098d26fa3fd84ab41f63e5e686ea5d8759c11977d8aaf9a0929462dfa8e1ab4a886eb1d9029b76ba6997310b93462afcc08ecde247188cc355c6b1e8991e497e0e641a32f6134e3f7529507f67a0581c5c0c6cb2fa1411c8afdd50ec187ceb211cceb77ed324db7abe7862d1b2c605b87f55c98d74aa1a9955acb6e82921e635376f1bc090ed52759f9ef9f42ee78cb754385be99415992c6d36950668508096c3fba9e60214a419924df5737e7924e0faf0538baf950511ef215b45253f746712101a36ef6755463d2c199c9ceb622ecc31aa34c540ef4f51828041c049944a251b4b25df5045f5cc441321337184b283e274cc2a25f4e1590a7b10d8dab8873a735d2cac3a7b6e3deefb4a1d22c4938e6e047bddc0cd5f53ba21c1846ca9f14bef781d2c50532d9f41099c446fc32c33ae0bbb5a0bc263a2da7fc27ae30d5245a2a43dcddc890efc2c32c58b945a37d0d1f6c26c31947717615554ccfed75626d3eb08cc184a94dde0a22c69ca087c141b01eef2832790a015d1f7606fcad43ce5360e914bd371a90a2d0383d10a3b753757868a83ee605497018e81e6e130c3b234017e95c63f2badbfc4ec826d30b5c1e792a5d4ace9b52288b8f7ca6c4150d51c168676257c0cc5bab1cff36c1c57a64fd40142ede45fd1feac7b0007865232d90a3a8fd923dbc70633916d0894dfa523e88e94dfa7d0224333fa16c2d4641cf2b63f5d1df33ec2d741576f41e0658f7840aa384e34410e605dfb2bcdfffde1b37276f822aa285be32cb1873f69cd424753e53d5da5202aced8e256dbc50e3625fab641fe2ad0577d27ed17d15879a8bc2be8de39a8ccb24a25a5049863c4f7cc359ab7e6b4dafc47dc3f298531173f4ac4b3c6b9dc283fc04b0d151490ebc5f50389683e9128d121653d8b6c8a630ac87e261e0e28385bf2c622cc50189f8f694e9ad9c3638aa516692ed9033d3c30642e158f5e751c7c9ad740d7a489ff6d40bab6814e6a6118f43b7ffc82eb961a6290c1a0107a28c3ade4d2b529a48c7267e0c254b88d8358c62d9408b75cbeae1c6d20d3bc475a71cd6f831204cb90888b26fc32ad72f4c595c1ad1ff7bcc4b8a7a14b446e0c149908fd81cbd653f07fc568a8007f8c605babfc485d5a9931a81678b26647742da99ca47546d16485196727a42b3229e9344c014967085ea883035020ab2258344b675602a59f0ccbd6d56865634c7797c8fc6748699727d1c972a9f66716396efcbecc48e81bd1208f5d771406f4591d32dc04bad042483ff6814f0f4ccce06ba8949b484adeb22c0847955bb02c0b556a207e5b7c0420ea9651d6802e50dac5dffae368062f2a11283831475f243b56bfa804a14854b8a5015c323ede12ef80330f54ab49d0bfd0cd29f4dc9412b98455c630b5dcf09edbe3f9f163b0b40c2485e7471475387b0ef2b09a03e712e7f51935b9f2f143ba8c771b30faa91c63947d7d8d8b19604892e1cf2e1771c17bd1cf4bd7f1eee82ef94054c7aa95e4de5e5f0726fd50e3accc0ab250088c8a233b34dd2e127ddbb009a801f5bb83d3024c2d6747180c3c6d7b9a3942ae3d9e611a0b8dbfc54386049b44177fa1b3978d85f725f89315699509843be8a218123f94522970538751e81368e342b471ab1484ec0abf5a9596507f64f037910e769c38e8cf82b31aa2575ae9332f739459f9bd9f90c682f3e0c917b6cceb8e66e32bd70dbb390dee3747695becebf7013c4d7b160ab519b6d93f7e9b05e69b7d703ac0a1984ce017d434c9984b5013ebbd4a14771ce9fd06f5902d453293ca26143fb13aee152118b375ab7321c52a625d2f648ff17691967b4227cc32d2b149147d7b88b9fd890e05f762f57290cf28ece93f7fb41d8c1a9274a16120161b62226737248d9c2fb5aca25be878d324c4d4e49409a4614016486b3995cefe2869f6c7c8e2ef14660fc90026223c85871d49b3fb22080e8a9c96778461acc07f213ff8e830f46d55edaf9a3e1ffdee4eea8d3fe831f79eb724ebd6017b8f876ee79b9548d1ed542663f43ed482b411e3b466aae89f3fd22752266e2e2f529993c00bf0c1ba07d8301a1ab192895fc252a4a0512795d9042128c058d7c6d201f1eb5a5a7f571ac5865bfe183500eb1532685ddbe3553de097bfc9003c112ea60040f613b535f577650127df277f1cb2c21b01d91eac1e571c5142c49ee4a569254e9eb3ef0c9393bee54f214484ff71b1c33894b08add65465aced6c48ce94e25e1e1703e06af69fa7db96d589a5284c6d06f47ed1e6ba1116730bb950b837bba37accafec9c2965283d0d5e355c5c9a744cc8a45466f7a2dc6575be2f55154f649981b8346f9f9fc73ca90b7d828575664009e58f057f1bd399a7ca5f170067ad80dc974c55f091c92d5f57f03714b0b41e9e8c2af18056062d170d90dc5624e821580b5755e0415ae56c1b245aff44d2b4d90e7e6b39aee99b02436ce7201db65e334a451062d8b7311d4c0bb0987729dffdf468a17755b1cac7d7c26387c23a80495c4b2d7f0fa3a1624e97041a23a5939b4b245fb786b45cb3e96f36aaa19a647d8e6dae52b455499ac208acf9d6a629c19c9fac2ad499824cebc496a9bee21fef93649d6bd7c1a8e976f10dcfd39e32cf6e85befad70f00de7b38a2e1dabdb0f2181dc348dbac4dddb2eb6d0addd17671159ef40542dcec6f8a116287712bbc24712ff43f88933beba515486207ce232d89a376486148fe76bf1d8ef44ba79cc37c2e58c86a669dcf5651dc495cb4fbda1d21826a01f65fd0e8a4e019ab50109b1cab1c37e152963f79315934d7f983510a3bd84e9a0ac25da235f052e158d2336c1dc5409889e33ee4334bcc1eb69a5cb669bf0bd52774a124f5042786e0e3248b034de3ed8505a800031371b318952ec350385ff4220a844543b09d4624649fb6fb91e2b9286f75dc8f5b6bd4eb9f86f6ec0de065405ac7072f28bc188c5bc1b71e4bf480847b05acea75e9c034cfde14e74296e7c461bcaa99eb7dc3d30f6e12bded354af97d03466cf3df139acb42ecd9f3351defc897bc0d420f6fc7bca571ded83fe397cf00a7ca188d93b4b5073d2f0648953570983463aa2ac025d5371de4aa15f03cdfd4006445cb61429c0b9562e879eeed7247100e8987ecd7819bb6b95ae7924f03ae1644f18a8df828c4ff7392cf1456d8545ede469899618b3b9579db7815d6b3cddb34bb65b93152b7b2719ce1142221ad9dfb43a3799f9321991c5a40c4f276cca15c19c4eb958f6f4f7c8393fa0a9c0338ec693869d470a076294079aad99e25b8a032f56ffb0d631e222540dc442aa2d2b3bf7922232ee9cc074ed6a7a65d96c2b7c7afe5f88a403a588591b65b5c52d800624824408e2c194266424a8936b053aea40f23577e4a92726563e9a7ad66628d079569880849b09b2cb78a578a8a9068f718a5898959451e09bcc975e4aad54e63c76fb3a4487bca9aee1a4e1ef79942238db902e533ccccdf7114f10b4b0ca35620791234b42958bbb4162ccb25328d1957696348973ababe9db48eae9dcf78cc72a64a1ca9f4e3b32b5250327d69a7404e56cc8f04ef0bb23cb1045d62eb5a28f70d45f4ded61b3a0747b1f177ff6a34a0686579a0531b866c4724d36f618175b5150c20ac0a5bb474f6904a153492113131ed358aec5e67ea846d37406ba8f3245e423e6980d362cdcabf830ee61e8fce3fbc7fe5438b0313fe1c47829bd6ef4e80d91d0553784c6326bc035c65fb821560c97f517c41925a74550d8bf4144bea3387f7254624552e8c491d79f5bde8ec80f90eff35be8b91f7e52e81b9c9251f94f15b306781129a31447b81854b38340c3f81b93fbe5172b28c0ab98174bff750b870f7f1a9f21a6a81f451b7f07279bb3465218e1c8dc9a3deb47722748c892f1608ba7612eaa235838f5657e80660376b5159c8fb2c5850d2f876e113c200743c039ce99921a26990d85dd721258a49a9419a31be8518e4ba09118688e22177ea012069be0318ab5ad2e9a4630bf3ad3dc1101fad2ac8cbcee4a8e37b2abaa2bd28caf4b7d67db1383b0285171ebc55a0f9e0db1db486efec5d110a29c1f96dc2de18f19dcbd81674d8f8eea59bdae410386c71d71c367dc2bf4c48cf33ebe9d169f57abcbb4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5d, 0x4, "da75381e7935c848a5b9b0b9600abfbe93c6e683583d35edf03036a570debb217f856decf95ebf1b38e15bcbad418112e6954e0299d3202a87f5dd87fcfb4181a3e5494cbaf7613dba3dd1453d946a67fda81b914918b13597"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x208, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':(\'},})\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%#\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '$-))$-!^[.-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7cac}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1abb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[[&:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.[^\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}@.\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '/dev/ocfs2_control\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x12d4}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000180)) 22:48:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) [ 1104.847033] *** Guest State *** [ 1104.860242] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="3503067dce1271f2a89cacc06cb78e0acdf03149f775e0a082e68de4bc074f951335d1465a0ea1bf2aa0c6a9b9c3e6c91e2f33ec4f1af88b22d7553e839a91b3d1555bd1ff47b818971df7bdde3a7b49069d2a88c952838d8bbb4618aef353ba31a0f966d118f48f59f6dd3f", &(0x7f0000000080)=""/161, &(0x7f0000000140)="5cf4c1a5b3", &(0x7f00000001c0)="f2524e9c793697093e5e0ffdb44ff14ab1611ab859b4f5f202896a6a2947b4372c9f6f6b511bdff37b32e175acecf21cf35401dec01dbab168910c80e1a4a2700dc8a3f89ef7c3140101ddebed54dc4dedd0cf0a5f6381ca22504ff809a36fe671a2e8e0b8e8ad1d621a8e0831d61506e92447fe23749981139a0c", 0xffffffff, r2, 0x4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TIOCSIG(r4, 0x40045436, 0x14) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x8, 0x5}, {}, {0x5}, 0x0, 0x100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x7}) 22:48:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) [ 1104.898540] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1104.935815] CR3 = 0x00000000fffbc000 [ 1104.946738] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1104.965975] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1104.988827] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1105.004363] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x3, 0x100c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1ac}}, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000380)=0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 1105.025410] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.049726] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.076552] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.098327] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.113601] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.134390] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1105.150704] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1105.170639] IDTR: limit=0x0000ffff, base=0x0000000000000000 22:48:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x80, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x15, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r4, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000600)={0x2, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x1c, r6, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000018}, 0x40) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000680)={0x10003, 0x0, &(0x7f0000ffd000/0x2000)=nil}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1105.188430] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1105.223124] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1105.275732] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1105.289260] Interruptibility = 00000000 ActivityState = 00000000 [ 1105.295795] *** Host State *** [ 1105.300794] RIP = 0xffffffff8116426f RSP = 0xffff888051e779d0 [ 1105.307051] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1105.316603] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1105.342032] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1105.348371] CR0=0000000080050033 CR3=000000008aae6000 CR4=00000000001426f0 [ 1105.355849] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1105.364826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=12881 comm=syz-executor.5 [ 1105.380378] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1105.390128] *** Control State *** [ 1105.396268] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1105.404603] EntryControls=0000d1ff ExitControls=002fefff [ 1105.412833] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1105.434402] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 22:48:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1105.443096] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1105.451418] reason=80000021 qualification=0000000000000000 [ 1105.459129] IDTVectoring: info=00000000 errcode=00000000 [ 1105.473273] TSC Offset = 0xfffffdadade8149a [ 1105.486487] EPT pointer = 0x000000005cde201e [ 1105.493431] Virtual processor ID = 0x0002 22:48:50 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1a9480) fcntl$setstatus(r0, 0x4, 0x0) 22:48:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x3, 0x100c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1ac}}, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000380)=0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 22:48:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1ff, 0x400) getsockname$netrom(r1, &(0x7f0000000180)={{0x3, @default}, [@bcast, @netrom, @remote, @rose, @remote, @rose, @netrom, @rose]}, &(0x7f0000000280)=0x48) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/182) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x40000, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x59) 22:48:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x40, r2, 0x400, 0x70bd26, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4814}, 0x4000001) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}}, 0x800) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x800, 0x7d2e) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x400, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000000)={{r6}, 0x0, 0xfffffffffffffff8, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r8, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000040)=""/113) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000340)={0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0xfffffffd}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x200) [ 1105.616691] *** Guest State *** [ 1105.623504] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1105.634018] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1105.655448] CR3 = 0x00000000fffbc000 [ 1105.660931] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1105.672345] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1105.679341] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1105.693976] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1105.712813] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000001c0)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000040)={0x4, 0x1, 0x1}, &(0x7f0000000080)=[{}]) 22:48:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x3, 0x100c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1ac}}, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000380)=0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 22:48:50 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e6c951b0b6d76c31b7db4df215ea2796b000000508386e4e145cbd5232a719913491999b8f3c086401110bdf4015ee88d378bad2861a734ed09211940c833b856746f3c80ee28bebded38f0b183fe3c9fbc789656041b016ffa0a1a61f7916f", @ANYRES16, @ANYRES32=r4, @ANYBLOB="cfaa363a2069e8fcff2760b6b5ccb98c9dbf938f99c3a917511ac301bc8a62dc2aa3fcf8f4f06acb07759d07b67f5c52e2f951e22b87b0ec020b93f0cf4a642a4eece5ffa7ae045e888d46759611a39e4b781c379512b7394342c0c3", @ANYBLOB="08042ea900000000000000832156c6a186487e549b0b0400", @ANYRES32=r1, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRESOCT=r3, @ANYBLOB="d41cab9c74f8435b0d284f1c74b239263b9057cd083feb8e9f966c48c3e04b786878feb0025176a03a0aa4084dcd7230005c207a9ef20f4a4216e3395decfe08b946457f59fe4af8aa77c938ad4ea02a1df2c5587721f13c9b1eee3080ba69d8d65ff08d13338f180f810bcc4185d232a571231aa1041b38da789aca8d79e2554e6a93244df6934d74f296b89883460b277f672e188cdf6a094321f2cf57cb2736e492cd03e05ae8cb397e474ec79a76175d47268ea4a9e26a14a46647dd2fe121a2e6363ac2eea1ade704db76afe753abeb2fa7bdf341de576743215e7e93962317c07ebc614e"], 0x70}}, 0x20004081) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @rand_addr=0x64010102}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x80900002, r5}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97ef6c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000000002fc275b027d7ec", @ANYRES32=r6, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r8, @ANYBLOB], 0x70}}, 0x20000001) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001900)=0x0, &(0x7f0000001940)=0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c00b71d", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf250f000000200001801400020073797a5f74756e00000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0c00018006000100", @ANYRES32=r9, @ANYBLOB="5c000180080003000000000008000300010000000800030003000000140002006970766c616e3000000000000000000008000300020000000800030003000000080003000100000014000200626f6e643000"/92], 0x9c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x70, &(0x7f0000000040)={r11}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r11, 0xd20}, 0x8) [ 1105.910941] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.937805] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.945902] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r3) [ 1105.971299] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1105.984170] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1105.992986] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1106.001516] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1106.022827] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1106.038174] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1106.044815] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1106.055380] Interruptibility = 00000000 ActivityState = 00000000 [ 1106.066367] *** Host State *** [ 1106.072742] RIP = 0xffffffff8116426f RSP = 0xffff88805905f9d0 [ 1106.084166] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1106.093478] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1106.093629] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1106.093870] CR0=0000000080050033 CR3=0000000094b0a000 CR4=00000000001426e0 [ 1106.094010] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1106.094161] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1106.094297] *** Control State *** [ 1106.094384] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1106.094457] EntryControls=0000d1ff ExitControls=002fefff [ 1106.094606] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1106.094678] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1106.094751] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1106.094823] reason=80000021 qualification=0000000000000000 [ 1106.094890] IDTVectoring: info=00000000 errcode=00000000 [ 1106.094957] TSC Offset = 0xfffffdad44383273 [ 1106.095096] EPT pointer = 0x0000000095c2f01e [ 1106.095225] Virtual processor ID = 0x0002 22:48:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) 22:48:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x3, 0x100c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1ac}}, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000380)=0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 22:48:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r2}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:48:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x8, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:51 executing program 1: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1106.506206] *** Guest State *** 22:48:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1106.531429] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1106.568458] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1106.681121] CR3 = 0x00000000fffbc000 [ 1106.692751] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1106.710539] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:48:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x20, 0x40}]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffe}, {}, {}, {}, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x7}) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) 22:48:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x3, 0x100c0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1ac}}, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000380)=0x5) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 1106.731468] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1106.754167] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1106.796595] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1106.831399] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x556, 0x0, 0x500, 0x960, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x800}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)={0x0, 0x7fff, 0x3ff}) 22:48:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(0xffffffffffffffff, &(0x7f0000003480)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) [ 1106.863309] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1106.908792] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:51 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) 22:48:51 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b917102b03756acaba15ca1ed4782bfbaf6cebe37d62d0d86abf48ea3c683e1669ffa3a48c475a8f217db4cfc2fac5f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x6d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000380)="b9ff0300600d698c389e14f065581fff", 0x0, 0x7758, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 1107.017334] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:48:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, 0x0, 0x0) [ 1107.070432] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1107.103698] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1107.153759] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1107.188950] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1107.220653] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1107.247594] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1107.255236] Interruptibility = 00000000 ActivityState = 00000000 [ 1107.277604] *** Host State *** [ 1107.280931] RIP = 0xffffffff8116426f RSP = 0xffff88809a26f9d0 [ 1107.286910] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1107.316445] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1107.328142] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1107.334064] CR0=0000000080050033 CR3=000000008f3a8000 CR4=00000000001426f0 [ 1107.357558] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1107.368278] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1107.374363] *** Control State *** [ 1107.407719] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1107.414801] EntryControls=0000d1ff ExitControls=002fefff [ 1107.427993] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1107.434924] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1107.457575] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1107.464156] reason=80000021 qualification=0000000000000000 [ 1107.487508] IDTVectoring: info=00000000 errcode=00000000 [ 1107.492958] TSC Offset = 0xfffffdacc9f28497 [ 1107.497265] EPT pointer = 0x000000005be6201e 22:48:52 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x6d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000380)="b9ff0300600d698c389e14f065581fff", 0x0, 0x7758, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:48:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, 0x0, 0x0) 22:48:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1107.515341] Virtual processor ID = 0x0002 22:48:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x4) 22:48:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x6d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000380)="b9ff0300600d698c389e14f065581fff", 0x0, 0x7758, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:48:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, 0x0, 0x0) 22:48:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) 22:48:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b917102b03756acaba15ca1ed4782bfbaf6cebe37d62d0d86abf48ea3c683e1669ffa3a48c475a8f217db4cfc2fac5f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x6d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000380)="b9ff0300600d698c389e14f065581fff", 0x0, 0x7758, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:48:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x5d9042, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:52 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b917102b03756acaba15ca1ed4782bfbaf6cebe37d62d0d86abf48ea3c683e1669ffa3a48c475a8f217db4cfc2fac5f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x6d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0xc) [ 1107.670238] *** Guest State *** [ 1107.689622] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1107.737916] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1107.779938] CR3 = 0x00000000fffbc000 [ 1107.796177] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1107.809309] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1107.816002] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1107.824280] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1107.833480] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1107.842368] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1107.853519] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1107.862286] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1107.878813] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1107.888596] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1107.896788] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1107.906016] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1107.914893] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1107.923590] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1107.931531] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1107.950290] Interruptibility = 00000000 ActivityState = 00000000 [ 1107.956701] *** Host State *** [ 1107.961035] RIP = 0xffffffff8116426f RSP = 0xffff88805648f9d0 [ 1107.967356] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1107.997527] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1108.005421] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1108.017552] CR0=0000000080050033 CR3=0000000067107000 CR4=00000000001426e0 [ 1108.024750] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1108.051991] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1108.068313] *** Control State *** [ 1108.076316] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1108.093461] EntryControls=0000d1ff ExitControls=002fefff [ 1108.112770] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1108.136078] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1108.150727] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 22:48:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@private1}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) 22:48:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket(0x26, 0xa, 0x80000000) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7dfd, 0x101000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0xffffffffffffff3c) 22:48:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480), 0x0) 22:48:53 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x6d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 1108.168802] reason=80000021 qualification=0000000000000000 [ 1108.184366] IDTVectoring: info=00000000 errcode=00000000 [ 1108.196197] TSC Offset = 0xfffffdac2daeace3 [ 1108.205132] EPT pointer = 0x00000000861f501e [ 1108.210291] Virtual processor ID = 0x0002 22:48:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 22:48:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, {}, {0xffffffc0}, {}, {}, 0x0, 0x100, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000001c0)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x70, &(0x7f0000000040)={r7}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={r7, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) 22:48:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480), 0x0) [ 1108.340297] *** Guest State *** [ 1108.343736] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:53 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x400}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:53 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1108.402087] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1108.440640] CR3 = 0x00000000fffbc000 22:48:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480), 0x0) [ 1108.452544] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1108.475524] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1108.503825] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1108.531243] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1108.539980] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1108.553504] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1108.563543] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1108.572761] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1108.584682] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1108.593111] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1108.601656] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1108.614367] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1108.622579] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1108.631883] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1108.638527] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1108.646022] Interruptibility = 00000000 ActivityState = 00000000 [ 1108.653071] *** Host State *** [ 1108.656308] RIP = 0xffffffff8116426f RSP = 0xffff8880528279d0 [ 1108.662671] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1108.669339] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1108.677203] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1108.683344] CR0=0000000080050033 CR3=0000000067093000 CR4=00000000001426f0 [ 1108.690654] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1108.697343] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1108.703476] *** Control State *** [ 1108.706931] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1108.713741] EntryControls=0000d1ff ExitControls=002fefff [ 1108.719312] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1108.726278] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1108.733031] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1108.739739] reason=80000021 qualification=0000000000000000 [ 1108.746083] IDTVectoring: info=00000000 errcode=00000000 22:48:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000000)="ae19cad105a01c73ba405fc1162bf6dfb538f20faf7669f71e07123614ab946829433d404aa9d323c8bf4209b02b56fccfe3182bd2724805c06033a2edb60cb2b89e2afa074019fdab9b4939e8ad3e3ebe0aa4fd2408e84b45d4fd70311ac4108787ee5e1974bbee93a00d96321a0995634fbab6d46c5512869bd4fc5ca5d84d712f2e") ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:53 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 22:48:53 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind(r2, &(0x7f0000000240)=@hci={0x1f, 0x3, 0x4}, 0x80) r3 = dup(r1) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f00000000c0)=r4) ioctl$VT_RELDISP(r3, 0x5605) fcntl$setstatus(r0, 0x4, 0x0) 22:48:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{0x0}], 0x1) [ 1108.751662] TSC Offset = 0xfffffdabcf2ed8e6 [ 1108.756060] EPT pointer = 0x000000008e23e01e [ 1108.760698] Virtual processor ID = 0x0002 22:48:53 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 22:48:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{0x0}], 0x1) [ 1108.880766] *** Guest State *** [ 1108.895280] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1108.915026] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1108.935170] CR3 = 0x00000000fffbc000 [ 1108.942249] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1108.951672] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1108.962858] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1108.972804] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1108.983804] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1108.995663] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.006210] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.020349] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.029036] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.037023] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1109.045366] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1109.053755] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1109.061962] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1109.070161] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1109.076579] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1109.084120] Interruptibility = 00000000 ActivityState = 00000000 [ 1109.091039] *** Host State *** [ 1109.094238] RIP = 0xffffffff8116426f RSP = 0xffff8880636b79d0 [ 1109.100500] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1109.106917] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1109.114893] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1109.121005] CR0=0000000080050033 CR3=0000000092549000 CR4=00000000001426e0 [ 1109.128395] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1109.135094] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1109.141428] *** Control State *** [ 1109.144919] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1109.151770] EntryControls=0000d1ff ExitControls=002fefff [ 1109.157256] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1109.164279] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1109.171085] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1109.177906] reason=80000021 qualification=0000000000000000 22:48:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000000c00000008000300", @ANYRES32=0x0, @ANYBLOB="e46f5e57552eb5b0b396a66bd02c3d66270b33614b70178a06a45bea230ac0a75a5d8c73b76491e78aeb5181c37f6be5dcb9ed5235067597ac069d345f58bd0a5e1f14c6a4fb9e92b793f6f7bfbfeff33d7fb4c1ac3420e6dae6b5504bc3b6d83d3772864a2e2b3feb2c621ea055385e5c291aa2e70f88feb13d372b58f45ab67eaf0831b9e3ed0aac74cf6814c6938525ccae14411d6d2bb2365dbb6329c0142e6644e7535ff6ff7320e9d864ef4d624f2792721df9ea6ae624c9264c93ba4295f77f9c0018280088b240c12e7c14"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f02000000000000000001000000000000000c41f0000014001462726f6164636173742d6c696e6b1177"], 0x30}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r5, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x100, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x222, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x401, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x200000f5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf) r1 = dup(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x87, @local, 0x4e21, 0x0, 'lblc\x00', 0x22, 0x1, 0x7d}, 0x2c) read$fb(r1, &(0x7f0000000000)=""/244, 0xf4) 22:48:54 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0x1, 0x4}, {0xff, 0x4}, 0xfffffbe8, 0x2, 0x7f}) 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 22:48:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xa00) readv(r0, &(0x7f0000003480)=[{0x0}], 0x1) [ 1109.184350] IDTVectoring: info=00000000 errcode=00000000 [ 1109.190022] TSC Offset = 0xfffffdab87f3d86f [ 1109.201680] EPT pointer = 0x000000005233a01e [ 1109.224479] Virtual processor ID = 0x0002 22:48:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 22:48:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x9a0000, 0xb58, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909df, 0x8000, [], @string=&(0x7f0000000000)=0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x188, 0x188, 0x288, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d4, 0x4d6], 0x5, 0x80}}, @common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'macvtap0\x00', 'veth1\x00', 0x4, 0x2, 0x4, 0x0, 0x4, 0x20, {0xb20}, {0xaa2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfffffffd, 'syz0\x00', {0xe2}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [0x0, 0xffffffff, 0x0, 0xff], [0xff000000], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x2e, 0x40, 0x0, 0x12}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x2], 0x9f3, 0xe, 0x2}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@private1={0xfc, 0x1, [], 0x1}, @remote, [0x0, 0xff, 0xffffff00, 0xff], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'vcan0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x73, 0x3, 0x2, 0x61}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r5, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000140)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x2000, &(0x7f00000000c0), 0x9, r3, 0x4}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r2, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendto$isdn(r1, &(0x7f0000000040)={0x6, 0x401, "da35aad4b5e87752f77295eda88d4349d3de685917243d0113acb398fc4974c02d0a2b310b16b3d5ec949e45e464f1139df4e759016680593775d6534c244d4bf35b19628aad42b7684b56315bb7ae923fe62d3f3fa8d3a8160ef71740fc6364f80e4812"}, 0x6c, 0x4000, &(0x7f00000000c0)={0x22, 0x7, 0x7f, 0x2, 0x6}, 0x6) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x100}) fchdir(r0) 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b917102b03756acaba15ca1ed4782bfbaf6cebe37d62d0d86abf48ea3c683e1669ffa3a48c475a8f217db4cfc2fac5f"], &(0x7f0000000140)='GPL\x00'}, 0x48) 22:48:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r2, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:54 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4d4901) fcntl$setstatus(r0, 0x4, 0x0) [ 1109.399013] *** Guest State *** [ 1109.411715] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1109.426923] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1109.467501] CR3 = 0x00000000fffbc000 [ 1109.481467] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1109.522605] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1109.553795] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1109.568767] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1109.577031] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.603347] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.611672] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.621631] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.630629] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1109.640866] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1109.649667] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1109.658546] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1109.667152] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1109.676406] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1109.683546] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1109.691275] Interruptibility = 00000000 ActivityState = 00000000 [ 1109.698393] *** Host State *** [ 1109.701620] RIP = 0xffffffff8116426f RSP = 0xffff888063e179d0 [ 1109.707867] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1109.714313] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1109.722534] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1109.729007] CR0=0000000080050033 CR3=00000000901c2000 CR4=00000000001426e0 [ 1109.736085] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1109.742985] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1109.749252] *** Control State *** [ 1109.752802] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1109.759594] EntryControls=0000d1ff ExitControls=002fefff [ 1109.765081] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:48:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:54 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r2 = userfaultfd(0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x8, 0x32}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fcntl$setstatus(r2, 0x4, 0x400) 22:48:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r2, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) ptrace$setopts(0x4206, r2, 0x6, 0x10004e) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0xf520, 0x4, 0x3, 0x6, 0x2, 0x7}) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000001c0)={0x10001, 0x0, 0x1, 0x400}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80000) 22:48:54 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x14000) flistxattr(r1, &(0x7f0000000400)=""/4096, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r3, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x85, "8e68c0", "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"}}, 0x110) [ 1109.772421] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1109.779211] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1109.785808] reason=80000021 qualification=0000000000000000 [ 1109.792348] IDTVectoring: info=00000000 errcode=00000000 [ 1109.797946] TSC Offset = 0xfffffdab3fc18dd6 [ 1109.802295] EPT pointer = 0x00000000a4f7d01e [ 1109.806753] Virtual processor ID = 0x0002 22:48:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r2, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:54 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x48100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1109.932953] *** Guest State *** [ 1109.945876] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 1109.977989] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1110.003598] CR3 = 0x00000000fffbc000 [ 1110.014392] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1110.050017] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1110.066641] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1110.104583] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1110.114052] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.132251] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.144530] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.170745] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.183127] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.192067] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1110.211425] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1110.224373] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1110.234322] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1110.242613] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1110.249344] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1110.256818] Interruptibility = 00000000 ActivityState = 00000000 [ 1110.263183] *** Host State *** [ 1110.266449] RIP = 0xffffffff8116426f RSP = 0xffff888057cb79d0 [ 1110.272829] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1110.279520] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1110.287498] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1110.293427] CR0=0000000080050033 CR3=000000005e468000 CR4=00000000001426f0 [ 1110.300568] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1110.307427] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1110.313490] *** Control State *** [ 1110.316944] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1110.323684] EntryControls=0000d1ff ExitControls=002fefff [ 1110.329254] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1110.336182] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1110.342963] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1110.349751] reason=80000021 qualification=0000000000000000 [ 1110.356082] IDTVectoring: info=00000000 errcode=00000000 [ 1110.362313] TSC Offset = 0xfffffdaaf63cb585 [ 1110.366651] EPT pointer = 0x00000000577a601e [ 1110.371112] Virtual processor ID = 0x0002 22:48:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:55 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x381042) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipmr_delroute={0x6c, 0x19, 0x4, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x0, 0xa5, 0xfd, 0x7, 0xfe, 0xb}, [@RTA_METRICS={0x4f, 0x8, 0x0, 0x1, "ca479885c5a68cd80eea0485ac001de5b9aa611681558bc2690b3d6c53667703b9c4a1787680dbcc1fb87d36b063b7a4e1434ffd3b772e3046afe16b018345a145ed3db05209e610e42a46"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x1) r3 = dup(r1) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32=r5, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r7, @ANYBLOB], 0x70}}, 0x20000001) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fstat(r4, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) 22:48:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:55 executing program 1: timerfd_create(0x0, 0x80000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x301000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/23) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0xa, [0xad, 0x0, 0x4, 0x8001, 0x2, 0x6, 0x7f, 0x2, 0x0, 0x1]}, 0x18) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @loopback}}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) 22:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getitimer(0x2, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x2c, 0x8ac6, 0x0, 0x3f, 0x1, [{0x6, 0x4, 0x3, [], 0x100}]}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000280)=0x7, 0x4) 22:48:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) fstat(r1, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 1110.485838] *** Guest State *** [ 1110.505521] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1110.548653] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1110.596983] CR3 = 0x00000000fffbc000 [ 1110.602973] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1110.622251] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1110.629048] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1110.641985] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1110.652321] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.663222] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.672393] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.684183] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.696647] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1110.709879] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1110.718313] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1110.726440] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1110.740250] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1110.751129] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1110.761802] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1110.775178] Interruptibility = 00000000 ActivityState = 00000000 [ 1110.783071] *** Host State *** [ 1110.790937] RIP = 0xffffffff8116426f RSP = 0xffff888062f479d0 [ 1110.802982] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1110.809867] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1110.820044] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1110.825962] CR0=0000000080050033 CR3=000000005e468000 CR4=00000000001426e0 [ 1110.834104] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1110.840905] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1110.847010] *** Control State *** [ 1110.850623] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1110.857431] EntryControls=0000d1ff ExitControls=002fefff [ 1110.862921] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1110.870172] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1110.876867] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1110.883630] reason=80000021 qualification=0000000000000000 [ 1110.890112] IDTVectoring: info=00000000 errcode=00000000 [ 1110.895596] TSC Offset = 0xfffffdaaa81d0c23 22:48:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:55 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) open$dir(&(0x7f0000000180)='./file0\x00', 0x10000, 0x100) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x10800, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$dsp(r2, &(0x7f00000000c0)="44793a3a04d7e2dac3f3e8dcd163898a7717e443de424c1dfe42c2512326b2f7a200459a7d6bf1e0dcea74e9bff04ae0fdd8651ae0895fb2457b6b78f8015a7152f399fe157c6cc6da7f4067e1b975d5d7cdf179d9b8b4b52fb9fc91370f130b6900ae52117c2396048ae56ba798b9eb3a0833f9e6d7dd7a2f15c4cdac2e9cb7448c3566c2fbe66fa4402e2bfcc39c3d031f761eacbf336adc7e04da45a537d524cfc58208c96f15d2eb4da96c0df7ed2f62ab1d2219a3b0b755", 0xba) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f0000286000/0x2000)=nil, 0x2000}, 0x200000}) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x0, @empty, 0xfffff800}, {0xa, 0x4e24, 0x334, @private2={0xfc, 0x2, [], 0x1}, 0x5}, 0x2, [0x22, 0x400, 0x1ff, 0x7fff, 0x10000, 0x40, 0xcb, 0x4]}, 0x5c) r4 = dup(r2) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0xffffffff, 0x4, 0x28, &(0x7f0000ffa000/0x3000)=nil, 0x9}) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000200)={0x58, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x4}) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000280)) 22:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="bc5b0cfdaf285e93daa83dc83540331fa453e9de349e0cf1e9579c0d606543d7a7ef7a77a3cf97d99efbd03a436745d28ae22612487c55002d0eab8c7d3b869d1dd73f29edbe79f4a8ff2b47823253c7f4f77346240693d58885e94d344386bc67dadee185297c19fb3a292f5bbd42bcadbd6d66bf186b3e9835cbee00d81cafc46b022ff9221728968381eaec620528eead7c2bd23900c40e1bf755a1f80704488ce18c35ea06d066f75d04780b607acfa45f9f54311e0b20654c6e8c48936d432c09001c27c377eaa6ba712708d759e2389d7926c72a0c58bc48d4cffc5d651131d2d254087667cff63ad094ee122e7d78b281af83097eb1affd0cd6a77c7f3bee6791ce7292f2b1d7243d2410b73bf7e9c2d726efc758390b2055f5aef8c592676523f365d5b9"], 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x22c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x85, @private1={0xfc, 0x1, [], 0x1}, 0x714}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xca}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2, 0x7}}}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x24000885) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9abb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x105f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e6524ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42a74475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c1d2d0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e11d6c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42876c22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f75543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14378d34}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6562eb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x231a3a29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428f1395}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3137}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1173dfa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c68dea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d11c120}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd9c2e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25abb36d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1242b9c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefcb8e0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616f4c0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158c3f91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ec4792}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8d80d1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245f9576}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682c4067}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d4d31d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d31dff5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x141aa403}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22aa0963}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00012abd7000fcdbdf25e1ffffff0700010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffff8, &(0x7f0000000040)={&(0x7f00000008c0)={0xb8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="200028bd7000ffdbdf250400000104000000000000003400048005000300000000000500030005000000050003000200000005000300060000000500030006000000080001000300000008000100ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x20080000}, 0x40880) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c0, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b6f8b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f99ae34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x690babf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7382}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7771707a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49d48db0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3346b431}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfae2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x134a70f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe854}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7435d7f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636d6af0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x741d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x129d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e2dbfa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54375d49}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71fdc44b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d24852d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x146}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54bfd07d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7342}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe429}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6945fc1c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1143}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ac40ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37a22ae6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37f0e32c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2fac04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48f00ab5}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa97e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x365a7096}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9896b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f677a64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69830a6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7041}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bb2de59}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffc}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x880}, 0x4004000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="02002bbd7000fcdbdf250400000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4a4, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bd38ca2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x465f9a33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d5497d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285cb716}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fa7a8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3794637b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8d7e4d1}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da1f9fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5945c8a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55181d0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c1652e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a40572}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0e25bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ada4b03}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dedca5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27606dd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12721582}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b7086c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e46195c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13512cd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b86b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x988b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c696899}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39e63928}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x88ce562}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63289759}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a98513}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xff51a91}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f420979}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x411a41b1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a7c38a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f6be5b8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e619f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69c3a9df}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3152fac6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6434daed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x572e3614}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d40d406}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x113b8719}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28a32a76}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e33ad60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x199812c2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42849961}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f55fd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2877dc60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73cc6733}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143c4199}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6beb896c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3316f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b48529c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d64c12a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7faf32f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x640ff857}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b8e51ff}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f7bfcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2551d54f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55e8f91b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f15710e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x268b853}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5193087}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d1135eb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a11bea5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41eea327}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2f3ba}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a5a757f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70afe163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d171e1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x355054cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60611604}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20040004) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x170, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bc0138d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcac0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e49f658}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f00d0b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x904b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ad9f05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70f81123}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59518dc7}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x301b0362}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57dee116}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x483f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35e477ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9ce}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe208}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c586b28}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d9fe28a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e490c15}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74bf0978}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8092}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb51d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbab1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a3ab09f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef15}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65f51336}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d689c85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46c1ffaa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5781ad5b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000081}, 0x840) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) [ 1110.900017] EPT pointer = 0x0000000063a6e01e [ 1110.904456] Virtual processor ID = 0x0002 22:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xcc, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xcc}}, 0x881) 22:48:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(poly1305-generic)\x00'}, 0x58) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x1, 0x4, 0x2cf, 0x9, r3}) 22:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 1111.043758] *** Guest State *** [ 1111.054890] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1111.107724] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1111.131864] CR3 = 0x00000000fffbc000 [ 1111.136595] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1111.155102] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1111.185207] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1111.193095] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1111.205975] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.216791] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.234721] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.251047] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.263560] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.273118] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1111.287445] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1111.298752] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1111.306890] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1111.315263] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1111.322494] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1111.330984] Interruptibility = 00000000 ActivityState = 00000000 [ 1111.337355] *** Host State *** [ 1111.340572] RIP = 0xffffffff8116426f RSP = 0xffff8880621ff9d0 [ 1111.346574] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1111.353197] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1111.361173] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1111.367695] CR0=0000000080050033 CR3=0000000092ca3000 CR4=00000000001426e0 [ 1111.374759] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1111.381605] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1111.387936] *** Control State *** [ 1111.391391] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1111.398290] EntryControls=0000d1ff ExitControls=002fefff [ 1111.403784] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1111.410878] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1111.417741] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1111.424345] reason=80000021 qualification=0000000000000000 [ 1111.430816] IDTVectoring: info=00000000 errcode=00000000 22:48:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008c}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/66, 0x42}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x100c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x1ac}}, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000380)=0x5) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 22:48:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x154, &(0x7f0000000200)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r1, 0x4, 0x0) 22:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket(0xa, 0xa, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x70, &(0x7f0000000040)={r3}, &(0x7f0000000340)=0x8) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r4}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r3, 0xa20}, &(0x7f0000000040)=0x8) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getpeername$unix(r5, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r7, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000100)={0xff, 0x2, 0x3}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 1111.436275] TSC Offset = 0xfffffdaa6125348c [ 1111.440815] EPT pointer = 0x000000009328601e [ 1111.445262] Virtual processor ID = 0x0002 22:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 1111.535592] *** Guest State *** [ 1111.554957] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 1111.583395] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1111.612612] CR3 = 0x00000000fffbc000 [ 1111.626384] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 22:48:56 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 1111.633659] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1111.644100] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1111.674741] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 22:48:56 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 1111.701452] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.730962] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.753043] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.761796] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.771983] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1111.781214] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1111.792878] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1111.801317] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1111.809875] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1111.818324] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1111.824753] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1111.832355] Interruptibility = 00000000 ActivityState = 00000000 [ 1111.838872] *** Host State *** [ 1111.842124] RIP = 0xffffffff8116426f RSP = 0xffff8880621ff9d0 [ 1111.848485] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1111.855042] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1111.863012] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1111.869316] CR0=0000000080050033 CR3=0000000095135000 CR4=00000000001426e0 [ 1111.876345] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1111.883145] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1111.889432] *** Control State *** [ 1111.892887] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 22:48:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1111.899742] EntryControls=0000d1ff ExitControls=002fefff [ 1111.905209] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1111.912481] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1111.919240] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1111.925838] reason=80000021 qualification=0000000000000000 [ 1111.932420] IDTVectoring: info=00000000 errcode=00000000 [ 1111.938057] TSC Offset = 0xfffffdaa18846efe [ 1111.942417] EPT pointer = 0x000000008d09001e [ 1111.946825] Virtual processor ID = 0x0002 [ 1111.995658] *** Guest State *** [ 1112.000267] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1112.010760] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1112.020046] CR3 = 0x00000000fffbc000 [ 1112.023805] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1112.030195] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1112.036253] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1112.043094] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1112.051463] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1112.059664] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1112.067945] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1112.076003] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1112.084354] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1112.092615] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1112.100892] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1112.109152] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1112.117383] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1112.125382] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1112.132241] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1112.139806] Interruptibility = 00000000 ActivityState = 00000000 [ 1112.146064] *** Host State *** [ 1112.149463] RIP = 0xffffffff8116426f RSP = 0xffff888066a579d0 [ 1112.155483] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1112.162083] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1112.170050] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1112.175959] CR0=0000000080050033 CR3=0000000095135000 CR4=00000000001426e0 [ 1112.183102] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1112.189921] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1112.195996] *** Control State *** [ 1112.199560] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1112.206260] EntryControls=0000d1ff ExitControls=002fefff [ 1112.212116] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1112.219318] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1112.226144] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1112.232935] reason=80000021 qualification=0000000000000000 [ 1112.239506] IDTVectoring: info=00000000 errcode=00000000 [ 1112.244973] TSC Offset = 0xfffffda9d83d7daf [ 1112.249441] EPT pointer = 0x000000009da2b01e [ 1112.253872] Virtual processor ID = 0x0002 22:48:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1112.341558] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.357139] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 22:48:59 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:48:59 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:48:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fstat(r1, &(0x7f0000000180)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r5}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r5, @ANYBLOB="08000b000300000008001900", @ANYRES32=r6, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r8, @ANYBLOB], 0x70}}, 0x20000001) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x60, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008884}, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000fff000/0x1000)=nil}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800000, 0x7}) 22:48:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x800, 0xa}}}, 0xb8}}, 0x0) 22:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba56"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:59 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:59 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 1114.610614] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1114.647868] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 22:48:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) io_setup(0x8000, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/83) [ 1114.689457] *** Guest State *** 22:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba56"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:48:59 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x571402) fcntl$setstatus(r0, 0x4, 0x0) write$P9_RREAD(r0, &(0x7f00000000c0)={0xc3, 0x75, 0x1, {0xb8, "16f9075baa8c815f955b27221cc8ea35a80f3386782d13217784c6b36cfbf4344acf22bbb325c140c56a025a705ea46f01b31cdc1e1debadd677fca32186d8e3823c5eb55246aab0bc1f6ad17da3d8049e8519f3f5d3cf0ba8a32641e0e26a2208fd96bece202232192c14ee2c4bc8a1fbb9c0a45e85b1881e4fb2af14a28f6d2c5f0ea045e92740354548689918679ca831e5f09d3cded61422f159be382fa177b2fce8ddf0c4f1e029814e9aa959cd4424877e3fb95735"}}, 0xc3) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4) [ 1114.710064] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 22:48:59 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:48:59 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) [ 1114.791855] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1114.825364] CR3 = 0x00000000fffbc000 [ 1114.843005] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1114.874563] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1114.881205] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1114.891880] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1114.910480] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1114.919503] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1114.937660] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1114.945870] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1114.962915] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1114.982651] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1114.996133] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1115.013995] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1115.023167] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1115.033081] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1115.040332] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1115.050844] Interruptibility = 00000000 ActivityState = 00000000 [ 1115.057933] *** Host State *** [ 1115.061204] RIP = 0xffffffff8116426f RSP = 0xffff88805b1ef9d0 [ 1115.069616] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1115.076235] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000003000 [ 1115.085374] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1115.092597] CR0=0000000080050033 CR3=00000000a9a55000 CR4=00000000001426e0 [ 1115.100349] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1115.107837] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1115.113935] *** Control State *** [ 1115.118452] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1115.125171] EntryControls=0000d1ff ExitControls=002fefff [ 1115.136713] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:49:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:49:00 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:49:00 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) fcntl$setstatus(r0, 0x4, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x6b74, @remote}) 22:49:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x4, 0x0, {}, {}, {0xfffffffc}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 22:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:49:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) [ 1115.143969] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1115.152599] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1115.160123] reason=80000021 qualification=0000000000000000 [ 1115.166574] IDTVectoring: info=00000000 errcode=00000000 [ 1115.173342] TSC Offset = 0xfffffda86c82835c [ 1115.177877] EPT pointer = 0x00000000608d901e [ 1115.182298] Virtual processor ID = 0x0002 22:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:49:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:49:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) 22:49:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:49:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) 22:49:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d", @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="08000b000300000008001900", @ANYRES32, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64, @ANYBLOB], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x2, 0x2, {}, {0xffffffffffffffff}, 0x9, 0x8}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x6d, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x5, {0x64, 0x3, 0x4}, 0x10000000, 0x0, 0xffffffff, 0x3, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x7, '.,&*})#', 0xc, '#$\'\'.{&({[:]'}, 0x0, '', 0x0, 0x0, r1}}, 0x6d) getgroups(0x2, &(0x7f0000006080)=[0xffffffffffffffff, 0x0]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000060c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000061c0)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c09695000000000000002ba728041598d6fbd30cb59981d36bb3019c13bd2321afb56fa54f36fb0b71d0e6adfe226bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b0db6cf529a2255b6b079e33881dcc7b1b85f453d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f1ab3e89cf6c662ed4048d3b3e22278d00031e5388e85c867ddd58211d6ececb0cd2b6d357b8580218ce74e467725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b24efa000000000000000000e0ff00000000000000000000003e4bcf8500000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf649c3bfdbc6ec664b91a6844efdebb7b3de8f6333f6c962b9f292324f41ab11f12fb1e2c4940345fdfaacf40159e800ea2474b542d35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a744d9a485c5989b8e633e3296e52d3370688c19322b95a2315b395000000000000000000000000020a40f135429e817e01e732000000001420d1a66e9b7ff12c96cf4f5bb64a74fc10070f62b6a5c67a8c59b29adcd9b4c116fbf54d055275eb505c98c8dfa61fa426cc78ca0cce5989dcbb0d156d34e53531251e502cbdf73101881e6222c601918400a6ba4a91f1d31c79eed85de58202d456a9b794c0fe5f167728867f22575e5525985d37c7e99a984ee1775b2370f0858a2adf13098b629db6009dd69916cbb5d407001dd62cadc9e23f46faf1906d6294071b19178dca12e5bd15ad4a4cad7a1f6000ffd6aa2005000000000000000000000000000000000000000000208ea40b6a82316b99ba561287ad5889d5153c1fd60472c92dbfab0c127ee656ce794836ee5f8a08c73688c8185829ecfa4eabb1ba73401b113b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 22:49:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) 22:49:00 executing program 2: syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0xc0242) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000180), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x9, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4881}, 0x800) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0xa0400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @broadcast}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x8, 0x0, 0x0, 0xb]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20c200a2, r4}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000003200000126bd7000ffdbdf25802014b9118417500b92849067359d2e746660540920d061d2ccc32b6c0fcd4bcbf11c3248d55606546d19ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="29020000e1f97e76c9c16d6d76c31b7db4df215ea2796b000000", @ANYRES32, @ANYBLOB="08000405", @ANYRES32=r4, @ANYBLOB="08000b000300000008001900", @ANYRES32=r5, @ANYBLOB="08000b937f4f88911738bec55e92beef250fc93d59ce71285eec523d7114065510b0aa876556df45e120dc5cf45adef6fdf7c8252445b5dec12a6ae5b85297ccc8a20095de4eea92ee50a95db4ea5f363846f17644efa7ac10e20c98d9c124d473cf44f2a358d3f591e1f171859ec009ed1206ef746ff397892ba31f992c68fc3758284f781022f937f886e6c66db5775e76b334dfadd6c5afe845ab9df38c056b21c7561dbe7b335451b290e07ef3ff6cc58a8ebdcbbdd3525892914c85ddccde7c2999104e857f4e5ad63383002b8611c9b8362e3e8190b06724e74445a07ce309331cf1f4428550bd47", @ANYRES64=r7, @ANYBLOB], 0x70}}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', r4}) fcntl$setstatus(r2, 0x4, 0x0) [ 1115.302506] *** Guest State *** [ 1115.302547] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1115.302569] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1115.302587] CR3 = 0x00000000fffbc000 [ 1115.302605] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1115.304975] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1115.305126] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1115.305188] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1115.305306] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.305426] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.305506] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.305605] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.305706] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.305805] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1115.305924] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1115.305945] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1115.306093] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1115.306130] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1115.306150] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1115.306170] Interruptibility = 00000000 ActivityState = 00000000 [ 1115.306213] *** Host State *** [ 1115.306263] RIP = 0xffffffff8116426f RSP = 0xffff8880640679d0 [ 1115.306385] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1115.306473] FSBase=00007fb82ea12700 GSBase=ffff8880aec00000 TRBase=fffffe0000003000 [ 1115.306521] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1115.306561] CR0=0000000080050033 CR3=00000000975a8000 CR4=00000000001426f0 [ 1115.306599] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff864018c0 [ 1115.306643] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1115.306659] *** Control State *** [ 1115.306682] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1115.306695] EntryControls=0000d1ff ExitControls=002fefff [ 1115.307429] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1115.307463] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1115.307486] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 1115.307504] reason=80000021 qualification=0000000000000000 [ 1115.307518] IDTVectoring: info=00000000 errcode=00000000 [ 1115.307544] TSC Offset = 0xfffffda813fab11c [ 1115.307623] EPT pointer = 0x00000000906d401e [ 1115.307664] Virtual processor ID = 0x0002 [ 1115.481091] *** Guest State *** [ 1115.481110] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1115.481161] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1115.481174] CR3 = 0x00000000fffbc000 [ 1115.481181] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1115.481199] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1115.481250] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1115.481271] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1115.481349] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481478] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481498] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481704] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481783] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481804] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1115.481844] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481876] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1115.481932] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1115.481951] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1115.482003] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1115.482017] Interruptibility = 00000000 ActivityState = 00000000 [ 1115.482052] *** Host State *** [ 1115.482074] RIP = 0xffffffff8116426f RSP = 0xffff8880640679d0 [ 1115.482176] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1115.482214] FSBase=00007fb82ea12700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 1115.482252] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1115.482294] CR0=0000000080050033 CR3=0000000093eab000 CR4=00000000001426e0 [ 1115.482354] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 1115.482392] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1115.482437] *** Control State *** [ 1115.482581] PinBased=0000003f CPUBased=b699edfe SecondaryExec=000000e2 [ 1115.482623] EntryControls=0000d1ff ExitControls=002fefff [ 1115.482662] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1115.482681] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 1115.482838] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1115.482861] reason=80000021 qualification=0000000000000000 [ 1115.482873] IDTVectoring: info=00000000 errcode=00000000 [ 1115.482898] TSC Offset = 0xfffffda7fbf7f560 [ 1115.482920] EPT pointer = 0x000000006592601e [ 1115.482939] Virtual processor ID = 0x0002 [ 1116.527526] NOHZ: local_softirq_pending 08 [ 1288.032891] INFO: task syz-executor.1:13526 blocked for more than 140 seconds. [ 1288.032898] Not tainted 4.14.184-syzkaller #0 [ 1288.032901] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.032906] syz-executor.1 D29712 13526 6358 0x00000004 [ 1288.032924] Call Trace: [ 1288.032943] __schedule+0x8a6/0x1d70 [ 1288.032956] ? firmware_map_remove+0x18f/0x18f [ 1288.032965] ? lock_downgrade+0x6e0/0x6e0 [ 1288.032974] schedule+0x8d/0x1b0 [ 1288.032982] schedule_preempt_disabled+0xf/0x20 [ 1288.032988] __mutex_lock+0x5f0/0x1430 [ 1288.033048] ? get_fb_info.part.0+0x5f/0x70 [ 1288.033055] ? fb_open+0xb7/0x400 [ 1288.033067] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.033076] ? __mutex_unlock_slowpath+0x75/0x780 [ 1288.033091] ? fb_open+0xb7/0x400 [ 1288.033096] fb_open+0xb7/0x400 [ 1288.033104] ? get_fb_info.part.0+0x70/0x70 [ 1288.033113] chrdev_open+0x1fc/0x540 [ 1288.033122] ? cdev_put.part.0+0x50/0x50 [ 1288.033134] do_dentry_open+0x44b/0xec0 [ 1288.033142] ? cdev_put.part.0+0x50/0x50 [ 1288.033151] ? __inode_permission+0xcd/0x2f0 [ 1288.033160] vfs_open+0x105/0x220 [ 1288.033169] path_openat+0xb68/0x2aa0 [ 1288.033184] ? path_mountpoint+0x960/0x960 [ 1288.033192] ? trace_hardirqs_on+0x10/0x10 [ 1288.033205] do_filp_open+0x18e/0x250 [ 1288.033214] ? may_open_dev+0xe0/0xe0 [ 1288.033225] ? lock_acquire+0x170/0x3f0 [ 1288.033232] ? lock_downgrade+0x6e0/0x6e0 [ 1288.033266] ? do_raw_spin_unlock+0x164/0x250 [ 1288.033275] ? __alloc_fd+0x1bf/0x490 [ 1288.033287] do_sys_open+0x292/0x3e0 [ 1288.033298] ? filp_open+0x60/0x60 [ 1288.033308] ? SyS_clock_settime+0x1a0/0x1a0 [ 1288.033315] ? fput+0xb/0x140 [ 1288.033323] ? do_syscall_64+0x4c/0x640 [ 1288.033329] ? SyS_open+0x30/0x30 [ 1288.033338] do_syscall_64+0x1d5/0x640 [ 1288.033350] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.033357] RIP: 0033:0x45cba9 [ 1288.033361] RSP: 002b:00007f3fe58bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1288.033370] RAX: ffffffffffffffda RBX: 00000000004f8c00 RCX: 000000000045cba9 [ 1288.033382] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1288.033386] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.033391] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.033395] R13: 00000000000007c6 R14: 00000000004cabb1 R15: 00007f3fe58be6d4 [ 1288.033412] INFO: task syz-executor.2:13514 blocked for more than 140 seconds. [ 1288.033416] Not tainted 4.14.184-syzkaller #0 [ 1288.033419] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.033422] syz-executor.2 D28928 13514 6360 0x00000004 [ 1288.033437] Call Trace: [ 1288.033448] __schedule+0x8a6/0x1d70 [ 1288.033460] ? firmware_map_remove+0x18f/0x18f [ 1288.033468] ? __lock_acquire+0x655/0x42a0 [ 1288.033476] ? __down+0x133/0x280 [ 1288.033481] schedule+0x8d/0x1b0 [ 1288.033489] schedule_timeout+0x86c/0xe50 [ 1288.033499] ? usleep_range+0x130/0x130 [ 1288.033505] ? __down+0x177/0x280 [ 1288.033515] ? trace_hardirqs_on+0x10/0x10 [ 1288.033522] ? lock_downgrade+0x6e0/0x6e0 [ 1288.033529] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 1288.033536] ? _raw_spin_unlock_irq+0x24/0x90 [ 1288.033545] ? __down+0x133/0x280 [ 1288.033551] __down+0x17f/0x280 [ 1288.033560] ? ww_mutex_lock+0x180/0x180 [ 1288.033574] ? vcs_release+0x60/0x60 [ 1288.033580] down+0x57/0x80 [ 1288.033588] console_lock+0x24/0x70 [ 1288.033595] vcs_open+0x3d/0x80 [ 1288.033603] chrdev_open+0x1fc/0x540 [ 1288.033612] ? cdev_put.part.0+0x50/0x50 [ 1288.033624] do_dentry_open+0x44b/0xec0 [ 1288.033631] ? cdev_put.part.0+0x50/0x50 [ 1288.033640] ? __inode_permission+0xcd/0x2f0 [ 1288.033648] vfs_open+0x105/0x220 [ 1288.033658] path_openat+0xb68/0x2aa0 [ 1288.033673] ? path_mountpoint+0x960/0x960 [ 1288.033681] ? trace_hardirqs_on+0x10/0x10 [ 1288.033694] do_filp_open+0x18e/0x250 [ 1288.033702] ? may_open_dev+0xe0/0xe0 [ 1288.033714] ? lock_acquire+0x170/0x3f0 [ 1288.033721] ? lock_downgrade+0x6e0/0x6e0 [ 1288.033731] ? do_raw_spin_unlock+0x164/0x250 [ 1288.033739] ? __alloc_fd+0x1bf/0x490 [ 1288.033751] do_sys_open+0x292/0x3e0 [ 1288.033759] ? filp_open+0x60/0x60 [ 1288.033767] ? SyS_clock_settime+0x1a0/0x1a0 [ 1288.033774] ? do_syscall_64+0x4c/0x640 [ 1288.033780] ? do_sys_open+0x3e0/0x3e0 [ 1288.033789] do_syscall_64+0x1d5/0x640 [ 1288.033801] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.033823] RIP: 0033:0x416921 [ 1288.033827] RSP: 002b:00007faa09a0b7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1288.033835] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416921 [ 1288.033840] RDX: 0000000000000000 RSI: 00000000000c0242 RDI: 00007faa09a0b850 [ 1288.033845] RBP: 000000000078bf00 R08: 000000000000000f R09: 0000000000000000 [ 1288.033849] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff [ 1288.033854] R13: 0000000000000c7b R14: 00000000004cedb7 R15: 00007faa09a0c6d4 [ 1288.033870] INFO: task syz-executor.2:13520 blocked for more than 140 seconds. [ 1288.033873] Not tainted 4.14.184-syzkaller #0 [ 1288.033876] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.033880] syz-executor.2 D29584 13520 6360 0x00000004 [ 1288.033896] Call Trace: [ 1288.033908] __schedule+0x8a6/0x1d70 [ 1288.033914] ? __lock_acquire+0x655/0x42a0 [ 1288.033927] ? firmware_map_remove+0x18f/0x18f [ 1288.033935] ? __lock_acquire+0x655/0x42a0 [ 1288.033943] ? __down+0x133/0x280 [ 1288.033949] schedule+0x8d/0x1b0 [ 1288.033957] schedule_timeout+0x86c/0xe50 [ 1288.033967] ? usleep_range+0x130/0x130 [ 1288.033974] ? __down+0x177/0x280 [ 1288.033984] ? trace_hardirqs_on+0x10/0x10 [ 1288.033992] ? lock_downgrade+0x6e0/0x6e0 [ 1288.033998] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 1288.034006] ? _raw_spin_unlock_irq+0x24/0x90 [ 1288.034015] ? __down+0x133/0x280 [ 1288.034022] __down+0x17f/0x280 [ 1288.034032] ? ww_mutex_lock+0x180/0x180 [ 1288.034045] ? vcs_release+0x60/0x60 [ 1288.034051] down+0x57/0x80 [ 1288.034059] console_lock+0x24/0x70 [ 1288.034066] vcs_open+0x3d/0x80 [ 1288.034075] chrdev_open+0x1fc/0x540 [ 1288.034084] ? cdev_put.part.0+0x50/0x50 [ 1288.034096] do_dentry_open+0x44b/0xec0 [ 1288.034104] ? cdev_put.part.0+0x50/0x50 [ 1288.034114] ? __inode_permission+0xcd/0x2f0 [ 1288.034123] vfs_open+0x105/0x220 [ 1288.034133] path_openat+0xb68/0x2aa0 [ 1288.034149] ? path_mountpoint+0x960/0x960 [ 1288.034157] ? trace_hardirqs_on+0x10/0x10 [ 1288.034164] ? trace_hardirqs_on+0x10/0x10 [ 1288.034177] do_filp_open+0x18e/0x250 [ 1288.034186] ? may_open_dev+0xe0/0xe0 [ 1288.034199] ? lock_acquire+0x170/0x3f0 [ 1288.034206] ? lock_downgrade+0x6e0/0x6e0 [ 1288.034217] ? do_raw_spin_unlock+0x164/0x250 [ 1288.034225] ? __alloc_fd+0x1bf/0x490 [ 1288.034238] do_sys_open+0x292/0x3e0 [ 1288.034246] ? filp_open+0x60/0x60 [ 1288.034255] ? SyS_clock_settime+0x1a0/0x1a0 [ 1288.034263] ? do_syscall_64+0x4c/0x640 [ 1288.034269] ? do_sys_open+0x3e0/0x3e0 [ 1288.034279] do_syscall_64+0x1d5/0x640 [ 1288.034291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.034296] RIP: 0033:0x416921 [ 1288.034300] RSP: 002b:00007faa099ea7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1288.034308] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000416921 [ 1288.034313] RDX: 0000000000000000 RSI: 00000000000c0242 RDI: 00007faa099ea850 [ 1288.034318] RBP: 000000000078bfa0 R08: 000000000000000f R09: 0000000000000000 [ 1288.034322] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff [ 1288.034327] R13: 0000000000000c7b R14: 00000000004cedb7 R15: 00007faa099eb6d4 [ 1288.034341] [ 1288.034341] Showing all locks held in the system: [ 1288.034350] 1 lock held by khungtaskd/1057: [ 1288.034354] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1288.034390] 1 lock held by in:imklog/6034: [ 1288.034393] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xa6/0xc0 [ 1288.034416] 1 lock held by syz-executor.1/13526: [ 1288.034418] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x400 [ 1288.034434] [ 1288.034437] ============================================= [ 1288.034437] [ 1288.034441] NMI backtrace for cpu 0 [ 1288.034449] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 4.14.184-syzkaller #0 [ 1288.034453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.034456] Call Trace: [ 1288.034466] dump_stack+0x1b2/0x283 [ 1288.034477] nmi_cpu_backtrace.cold+0x57/0x93 [ 1288.034487] ? irq_force_complete_move.cold+0x7b/0x7b [ 1288.034495] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 1288.034510] watchdog+0x5e2/0xb80 [ 1288.034519] ? kthread_flush_work_fn+0x20/0x20 [ 1288.034533] ? hungtask_pm_notify+0x50/0x50 [ 1288.034542] kthread+0x30d/0x420 [ 1288.034551] ? kthread_create_on_node+0xd0/0xd0 [ 1288.034560] ret_from_fork+0x24/0x30 [ 1288.034594] Sending NMI from CPU 0 to CPUs 1: [ 1288.035032] NMI backtrace for cpu 1 [ 1288.035036] CPU: 1 PID: 13484 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1288.035039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.035041] task: ffff8880a4ff64c0 task.stack: ffff888052e08000 [ 1288.035043] RIP: 0010:vga16fb_fillrect+0x93e/0x1880 [ 1288.035045] RSP: 0018:ffff888052e0f3e0 EFLAGS: 00000287 [ 1288.035049] RAX: 0000000000040000 RBX: ffff8880000a0050 RCX: ffffc90005a66000 [ 1288.035052] RDX: 0000000000040000 RSI: ffffffff831f9ef3 RDI: ffff888052e0f490 [ 1288.035055] RBP: 0000000000000050 R08: 000000000000ffff R09: ffffed104323c3dc [ 1288.035057] R10: ffffed104323c3db R11: ffff8882191e1edf R12: ffff8880000a0038 [ 1288.035060] R13: 0000000000000000 R14: 00000000e24a8bbd R15: 000000000000004f [ 1288.035063] FS: 00007f3fe58df700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 1288.035065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1288.035068] CR2: 000000c00079f000 CR3: 0000000066a55000 CR4: 00000000001426e0 [ 1288.035071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1288.035073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1288.035074] Call Trace: [ 1288.035076] ? fb_copy_cmap+0x28e/0x350 [ 1288.035078] ? vga16fb_setcolreg+0xfe/0x360 [ 1288.035080] bit_clear_margins+0x2a4/0x480 [ 1288.035082] ? bit_clear+0x460/0x460 [ 1288.035084] fbcon_clear_margins+0x274/0x300 [ 1288.035085] fbcon_switch+0xc4e/0x1700 [ 1288.035087] ? fbcon_set_font+0x7c0/0x7c0 [ 1288.035089] ? bit_update_start+0x1f0/0x1f0 [ 1288.035091] ? fbcon_set_origin+0x1c/0x40 [ 1288.035093] ? fbcon_scrolldelta+0x1080/0x1080 [ 1288.035094] redraw_screen+0x332/0x760 [ 1288.035096] ? set_palette+0x130/0x130 [ 1288.035098] ? fbcon_set_palette+0x466/0x580 [ 1288.035100] fbcon_modechanged+0x552/0x800 [ 1288.035102] fbcon_event_notify+0x11a/0x1750 [ 1288.035103] ? lock_acquire+0x170/0x3f0 [ 1288.035105] notifier_call_chain+0x107/0x1a0 [ 1288.035107] blocking_notifier_call_chain+0x79/0x90 [ 1288.035109] fb_set_var+0xaad/0xc70 [ 1288.035111] ? fb_set_suspend+0x110/0x110 [ 1288.035113] ? lock_acquire+0x170/0x3f0 [ 1288.035114] ? lock_fb_info+0x1a/0x70 [ 1288.035116] ? lock_fb_info+0x1a/0x70 [ 1288.035118] ? __mutex_lock+0x2cb/0x1430 [ 1288.035120] ? trace_hardirqs_on+0x10/0x10 [ 1288.035121] ? lock_fb_info+0x1a/0x70 [ 1288.035123] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.035125] ? do_fb_ioctl+0x36a/0x840 [ 1288.035127] do_fb_ioctl+0x3cc/0x840 [ 1288.035129] ? lock_downgrade+0x6e0/0x6e0 [ 1288.035130] ? fb_write+0x550/0x550 [ 1288.035132] ? avc_has_extended_perms+0x6e2/0xbe0 [ 1288.035134] ? avc_ss_reset+0x100/0x100 [ 1288.035136] ? __lock_acquire+0x655/0x42a0 [ 1288.035138] ? __lock_acquire+0x655/0x42a0 [ 1288.035140] ? trace_hardirqs_on+0x10/0x10 [ 1288.035141] fb_ioctl+0xda/0x120 [ 1288.035143] ? do_fb_ioctl+0x840/0x840 [ 1288.035145] do_vfs_ioctl+0x75a/0xfe0 [ 1288.035147] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1288.035149] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.035151] ? security_file_ioctl+0x76/0xb0 [ 1288.035152] ? security_file_ioctl+0x83/0xb0 [ 1288.035154] SyS_ioctl+0x7f/0xb0 [ 1288.035156] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1288.035157] do_syscall_64+0x1d5/0x640 [ 1288.035160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.035161] RIP: 0033:0x45cba9 [ 1288.035163] RSP: 002b:00007f3fe58dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.035168] RAX: ffffffffffffffda RBX: 00000000004e5a00 RCX: 000000000045cba9 [ 1288.035170] RDX: 0000000020000340 RSI: 0000000000004601 RDI: 0000000000000003 [ 1288.035173] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1288.035175] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.035178] R13: 00000000000002fe R14: 00000000004c5931 R15: 00007f3fe58df6d4 [ 1288.035179] Code: ff e8 17 07 3b fe 48 63 44 24 1c 44 8d 7d ff 48 89 04 24 e8 05 07 3b fe 45 31 ed 44 89 fa 85 ed 49 8d 5c 14 01 0f 84 b1 06 00 00 ed 06 3b fe 45 88 2c 24 49 83 c4 01 49 39 dc 75 ee e8 db 06 [ 1288.035605] Kernel panic - not syncing: hung_task: blocked tasks [ 1288.035612] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 4.14.184-syzkaller #0 [ 1288.035616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.035618] Call Trace: [ 1288.035626] dump_stack+0x1b2/0x283 [ 1288.035637] panic+0x1f9/0x42d [ 1288.035645] ? add_taint.cold+0x16/0x16 [ 1288.035655] ? printk_safe_flush+0xac/0x110 [ 1288.035667] watchdog+0x5f3/0xb80 [ 1288.035675] ? kthread_flush_work_fn+0x20/0x20 [ 1288.035684] ? hungtask_pm_notify+0x50/0x50 [ 1288.035692] kthread+0x30d/0x420 [ 1288.035699] ? kthread_create_on_node+0xd0/0xd0 [ 1288.035708] ret_from_fork+0x24/0x30 [ 1288.037327] Kernel Offset: disabled