(r2, 0xab08) 07:18:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2a000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8840) r3 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r3, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x20) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r6 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000780)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r6, @ANYBLOB="0220020053499b41afceb74d3e53347d4dc74914503f85473c925e7b4224147e2c2ec043d8ec414963835afb75df355f2e128f786c3643fa6d89d332924cc8ab7a9df12d88e6b2bee142bc03", @ANYRES32=r7, @ANYBLOB="040001000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000500000000002000060000000000"], 0x44, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004, 0x4000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 07:18:41 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16], 0x10}}, 0x0) 07:18:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x7b) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xa0, 0x3, 0xcb, "b4db58d4061292e4610bb40170ee8971", "60d5e9ccd9540751757df3c7573292d050c3f6bcf91ef97d101b6cb503973d34080fcff3c8690b6d2f1c0733f0045a5f264e3582d9217529156e531d9d0de3bb794eb829c18f545a5927488708aa42d3ca9e3e4905f094f750a7a968f430a155eeb2e768b9d5b73da389d3c2afd12a06674fb5f3effe9333584c3796be613e0d3a653d3efc2ea9900c9cad"}, 0xa0, 0x1) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$TIOCLINUX4(r1, 0x541c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 07:18:41 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4008af00, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) connect$inet6(r0, &(0x7f0000000140), 0x1c) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) utimes(&(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)={{}, {r1, r2/1000+30000}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0000004}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e0, r4, 0xa00, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2f7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x193c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000001, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2b0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdd2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc4b}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6c1c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc9c6}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x41}, 0x8004) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f00000004c0)=0x3) close(r0) 07:18:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = dup2(0xffffffffffffffff, r0) ioctl$RTC_UIE_OFF(r1, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 07:18:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:dpkg_lock_t:s0\x00', 0x21, 0x3) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback=0x10000000}, 0x10, &(0x7f0000000640), 0x28, &(0x7f00000000c0)=ANY=[@ANYBLOB="180001000000cd5ff09f479cb6e47cdc74c7b8149db23d4253a7e0f47479901f202be16d98741104db61d2548f9801ea28ef7605cbe52dc974514f3244e539ec4d7082997abacea52c2260adda734ad6db2dc2ce57d051773e6184ecb0d3de22fc822de6ba00b288572ba993a47c58fa99cb8c12c80c50d47b961654e907ca7cfbae4dfebe5acc513767c42e45a1f8354d311e4c4dd9d51e123e345fcfd5e35a8eceb7a763995101b9"], 0x18}, 0x0) 07:18:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4008af03, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r1 = dup2(0xffffffffffffffff, r0) ioctl$RTC_UIE_OFF(r1, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 07:18:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/67) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f00000000c0)="0df4d9a2972d1f05f7cf8d5e864bbd8fe469d9765897baf0a46fb714742c98066587a86f8250f92a437247fa973dda584bb1c05b2fb6f802b07d7fcc92c1dd6b6d3a0ee1ea04b82983bc995fd13ff54be8890fcdb9ceae19b79b0cc3b2d6cd9b2e72cf49155ebdd4467b0941582631c0b5a08b684761de52f0afbe210f09aba8fe0429f8979306aeab18b0991018101b3c421079f6e4de042db49dea7c619890446a1cb3c0e4368f876ab54025b8ae6f52a78b6b143f6b07d89437387fde36d7dd42d61e786dc36c928c76f699c68af875c49a9b42241a", 0xd7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) syz_execute_func(&(0x7f00000006c0)="615f0f9df40c3e22d4d4260f380474c467cd801b69e4ae6262691fff5807d955901090100a0000005bf91cc18fe9589b26e60ed8d3427d82dfdfe4da640f1a0207168f4808eebce00000802000c421650fd310b8b0ce3666f3e1dcdcab7d73fa6ffc06fc0601c2c4e3e95cdf09f265dc7f10c36645363ef8d9ce6526ded05f29acac2e4409566d00082640c401fe1d8bf4f4df64673667666643c4e1c955f3c4e3f9799e000000000b314f860f0d0f86450fd4f3f30b0f16afaf141123d8c4e2b5a945cd5d0f18f5") 07:18:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) getpeername$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) 07:18:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x3, 0x3, 0x10000}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) prctl$PR_SET_DUMPABLE(0x4, 0x3) io_setup(0xc01, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x659c, 0x1000000, 0x0, 0x6, 0xfffffffffffffffd, r0, 0x0}]) 07:18:42 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fchmod(r0, 0x130) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="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") r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 07:18:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4008af30, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) [ 279.212694][T14679] input: syz1 as /devices/virtual/input/input21 07:18:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 279.318485][T14688] QAT: Invalid ioctl 07:18:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0/file1\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f0000000140)='./file0/file1\x00', 0x3c0, 0x0) 07:18:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x400c4301, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) [ 279.439894][T14689] input: syz1 as /devices/virtual/input/input22 07:18:42 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x20110, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) acct(&(0x7f0000000000)='./file0\x00') r3 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ftruncate(r3, 0x40001) sendfile(r2, r3, &(0x7f0000000240), 0x100000000002) 07:18:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:42 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x4, @mcast1={0xff, 0x1, [0x9]}}]}}}]}, 0x48}}, 0x0) 07:18:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x400c6615, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) [ 279.647940][ T26] audit: type=1326 audit(1558250322.818:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14681 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fe4849 code=0x0 07:18:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:42 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3, 0x101000) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x8, 0xc0000000}) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000600)) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x109000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x49c, 0x2a0, 0x2a0, 0x2a0, 0x0, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xfc, 0x168, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x0, 0x72, 0x8}}, @common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x9, 0x6, 0x4, 0x7, 0x401, 0x7], 0x5}}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1, 0x1, 0x4, 0x0, 0x0, "f56e1a1c2c74ee9b3fa4fc9d7041d26fb68e678138047c9d7584246e33c4e7d85f6b4c0c28a1ae3f111df3a736c81ec903c67385869f6f5536bbc8e757fd6ba4"}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'veth0_to_team\x00', 'vcan0\x00', {0xff}, {}, 0xc, 0x3, 0x20}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x80, [0xffffffff, 0x4280, 0x10000, 0x5, 0x7ff, 0x200], 0x9, 0x40d}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x98c, [0x8, 0x6, 0x9, 0x3, 0x0, 0x2], 0x4, 0xfffffffffffffffe}, {0x7, [0xffffffff7fffffff, 0x39, 0xff, 0x80000001, 0xc4cf, 0xe400], 0x3ff, 0x4d}}}}, {{@uncond, 0x0, 0x10c, 0x168, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x1f, 0x1000, 0x3fe, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x3, 0x0, 0x2, 0x2}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x20}, 0xffff, 0x10, [0x1a, 0x3c, 0x15, 0x1f, 0x17, 0x3, 0x0, 0x37, 0x4, 0x1b, 0x25, 0x8, 0x11, 0x20, 0x14, 0x11], 0x1, 0x9, 0x80000001}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4f8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 07:18:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4010ae67, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) [ 280.015116][ T26] audit: type=1326 audit(1558250323.188:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14681 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fe4849 code=0x0 [ 280.087606][T14737] QAT: Invalid ioctl 07:18:43 executing program 1: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)=@ethtool_gfeatures}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100, 0x4001) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x20, 0x2000) r4 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x2, 0x121800) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) 07:18:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x20, 0x0, {0xffffffffffffffff, 0x3, 0x100, 0x0, 0x8}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b1c315b4005323baeb5bb3c9c0168e1944158faa5e95f5890be3794358b4e3106ce49e7f5e75dad56a6a896095d773a8ed3e83de25824bbf0dbd35656e14d293e6a39cd12b82fdf0d4ae8e00e1897e45f70a8428363be5e1f74668720c48279c70c4dfc21e6d2d094c10faa4dfb7b71f4c6cabadf613aa32a199729e9a201f334b7edd46efe52ac6e28d6c", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x9b8}}, 0x0) 07:18:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 280.311583][T14740] QAT: Invalid ioctl 07:18:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80600, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1f) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 07:18:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4020940d, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:43 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3, 0x101000) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x8, 0xc0000000}) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000600)) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x109000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x49c, 0x2a0, 0x2a0, 0x2a0, 0x0, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xfc, 0x168, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x0, 0x72, 0x8}}, @common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x9, 0x6, 0x4, 0x7, 0x401, 0x7], 0x5}}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1, 0x1, 0x4, 0x0, 0x0, "f56e1a1c2c74ee9b3fa4fc9d7041d26fb68e678138047c9d7584246e33c4e7d85f6b4c0c28a1ae3f111df3a736c81ec903c67385869f6f5536bbc8e757fd6ba4"}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'veth0_to_team\x00', 'vcan0\x00', {0xff}, {}, 0xc, 0x3, 0x20}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x80, [0xffffffff, 0x4280, 0x10000, 0x5, 0x7ff, 0x200], 0x9, 0x40d}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x98c, [0x8, 0x6, 0x9, 0x3, 0x0, 0x2], 0x4, 0xfffffffffffffffe}, {0x7, [0xffffffff7fffffff, 0x39, 0xff, 0x80000001, 0xc4cf, 0xe400], 0x3ff, 0x4d}}}}, {{@uncond, 0x0, 0x10c, 0x168, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x1f, 0x1000, 0x3fe, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x3, 0x0, 0x2, 0x2}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x20}, 0xffff, 0x10, [0x1a, 0x3c, 0x15, 0x1f, 0x17, 0x3, 0x0, 0x37, 0x4, 0x1b, 0x25, 0x8, 0x11, 0x20, 0x14, 0x11], 0x1, 0x9, 0x80000001}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4f8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 07:18:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) [ 280.436791][T14757] QAT: Invalid ioctl 07:18:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40247007, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:43 executing program 5: unshare(0x600) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x7, 0x1}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3658e188900f6bcc78f0fe902d3812a3c5f9a74ce36845ae5460009a2ee6850055b28fcf"], 0x1}}, 0x44801) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) socket$inet_sctp(0x2, 0x0, 0x84) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) epoll_create1(0x7fffe) 07:18:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x402c5828, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xa4ac, 0x0, 0xadb, 0x0, 0x0, 0x0, 0xfe], 0x1f004}) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x441) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000140)={0x98, 0x80, 0x0, 0x6, 0x10000}) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/r\x866_stats\x00\x1c\xe8\xde\xdc\xf9S\x0e\x1a\x80`\x85\xebd\\\x99\b\x05|y\x84\x05\xf5<\x9d\xcc\x82\xb4O\xa7e\x94>1\x1c\xb5yw\x90\x9f\xcb\x92i\xeb\x7f\xa9q6\xbf-~\xeb\xb0A\xdd\xbf}\"\xc0\xdc\xa7\x89\b\xae\fZ:\x02|R$\xbc@a') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = getpgid(0x0) fcntl$setown(r0, 0x8, r4) 07:18:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/242, 0xf2) 07:18:43 executing program 4: r0 = inotify_init() write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'vmnet1'}, {0x20, 'posix_acl_access$trusted'}, {0x20, '#\xc4'}, {0x20, '%^bdev\xd4vmnet1'}, {0x20, 'GPL)%'}, {0x20, 'posix_acl_accessnodevvmnet1systemproc'}, {0x20, 'posix_acl_access]\\,'}], 0xa, "3da91bb3354ba206ceff47d6b62fb81addf059b943a76c04f65d5b511048ad587bd6ea50bf91eb137c2df9d2fbb5167e105914533004b28ce69adbe7041c310ccb30428911ad6d64efeeefbb17caa6ddea5f268834a6bcbb59852d0d45cb3c6034870757c2a8ad75923a294325705d8ef06d7e8093b884846376"}, 0xf6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) syz_emit_ethernet(0x0, &(0x7f0000000240)=ANY=[], 0x0) shutdown(r1, 0x0) 07:18:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:44 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_OFF(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 07:18:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x402c582a, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x81) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xff, 0x100000001], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x6, 0x7, 0x6, 0x1ff, 0x401, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0x0, 0x7, 0x40, 0x4], 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:18:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffe1a}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) [ 281.275344][T14804] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.632676][ T8635] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.652482][ T8635] rtc_cmos 00:00: Alarms can be up to one day in the future 07:18:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010140}]}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x6) [ 281.682458][ T8635] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.699712][ T8635] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.707336][ T8635] rtc rtc0: __rtc_set_alarm: err=-22 07:18:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x64, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4, 0xe}}}]}, 0x34}}, 0x0) fcntl$addseals(r0, 0x409, 0x1) 07:18:44 executing program 4: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'yam0\x00', 0x2}) setxattr$security_selinux(0x0, &(0x7f0000000400)='security.selinux\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7, 0x100, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x9, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x9e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x301001, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r5 = dup(r3) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000080)=0x7fffffff, 0x4) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000200)={0x0, 0x0, [0x0, 0x1f4c3c48, 0x1]}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) listen(r2, 0x8) r7 = socket$inet6_sctp(0xa, 0x3, 0x84) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(0xffffffffffffffff) 07:18:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4070aea0, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008125e00f80ecdb4cb9f207c804a00d000000886beefb0a0002000a0ada1b40d805000300c51083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40200, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xff, 0x8480) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000140)={0x1, 0x5, 0x5, 0xb109, 0x81, 0x9c}) [ 281.800026][T14828] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 281.834454][T14828] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 07:18:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) write$FUSE_DIRENT(r1, &(0x7f0000000280)={0x98, 0x0, 0x2, [{0x5, 0x1, 0xe, 0x148000000000000, '\x9bwlan1**ppp1/)'}, {0x6, 0x80, 0x18, 0x4, 'procselinux\\!7bdev[wlan1'}, {0x5, 0x8, 0x17, 0x7f, '(-,securitywlan1trusted'}]}, 0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x400) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000480)={{0x4, 0x5, 0x1, 0x0, 'syz1\x00', 0x9}, 0x3, 0x0, 0x8, r4, 0x1, 0x401, 'syz1\x00', &(0x7f0000000080)=['vmnet1\x00'], 0x7, [], [0x800, 0x6, 0x10000, 0x82e]}) ptrace$pokeuser(0x6, r4, 0x8000, 0x6) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x8000000000000, 0x4, 0xffffffff, 0x0, 0x1}, r2}}, 0x85) [ 281.923420][T14841] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 07:18:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045104, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000380)={0x10000, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f00000003c0)={0x0, r2, 0x2, 0x4e0b84ce}) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair(0x1, 0x7, 0x1000, &(0x7f0000001440)={0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000140)=0x3ff, 0x4) kexec_load(0x2, 0x6, &(0x7f00000002c0)=[{&(0x7f0000000080)="f662444229401d4a5f50236ca857049c804b636c94e7bdd29167d93e3f055965a8884b2d49590e6fed639b35e209945f20b7591d2f9113cfd0c938275fee4edc0c6113654731d0df79dd89a0c6706eff258770a538db8faa295711b55b0f8c474e160ee83fb307fe9debf37418bff064ddc081e5311cc90d4003c57a2928f026b3ad0369cf67134a057192b4f0bbdf158eb8", 0x92, 0x4, 0x1000}, {&(0x7f0000000000)="250346a9f40826dac13cb634adfe", 0xe, 0xb3, 0x7}, {&(0x7f0000000180)="68602650bb3c305e0118a7c5e7c7", 0xe, 0x0, 0x2}, {&(0x7f0000000440)="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", 0x1000, 0x8, 0x2}, {&(0x7f00000001c0)="2d8e513b1f7c69f173d3", 0xa, 0x9, 0x7f}, {&(0x7f0000000200)="9c78a4977de79d5b1c6b4ff0c5f354de5e0d1fb10c2688258e4592d319a59634bac54c68e14836b26471214cf810515764ea455acab362f4c658a8c7a000d4d0ba8982bd0b250e3c76a455e753587020310fcd866c9a943b4c85904b6efb314b9296517a15c489d33e0fbd5d27f3b9d269a152a7a20c18ec62bc1b927d440e693e9e308832a7f87a921e8b", 0x8b, 0x7fffffff, 0xffffffff}], 0x3e0000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001580)=0x1b, 0x4) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000015c0)=ANY=[@ANYBLOB="caabbda8a5196748571adcad5ba9e3e6eea6e1dc3443b2c8c0513b83341efbf77bdbb279c6258eb29c18dda34401f28c25d8a618038502b360d5c0d12652fa2bf524595cb7fb137208eb490999bdeed75a32e8ac92c4fb50bb48dae3cfd769bb140fbac4adc69e2700d76fc408e3d6ef19024011fc1db58353060fefa1185ffe5ede60e55cb9aaf65c0b5d96f0c27b0e0802e53242b4361e1cc53fd4d03e530ff4732ba287894ab37954462866d14528504a8439cab22aa51077500f12fbffffffaea821fdbfd7bdc0e0d26edde980"], 0x8) connect$inet6(r4, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) [ 282.090523][T14841] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 07:18:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000780)='/dev/vcsa#\x00', 0x200, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') r3 = semget(0x0, 0x0, 0x0) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000940)=""/121) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, r2, 0x402, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20e2}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4d9f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000740)={r4, 0x80000, r1}) r5 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={r5, r6, r7}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @rand_addr="ea14de8244c36f3e0a8dcaee9d351ad7", 0x3b0a}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x1f, @loopback, 0x7}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e21, 0x1f, @loopback, 0x9}}, [0x1d5894fb, 0x7, 0x81, 0x8, 0x2, 0x8, 0x5, 0x7, 0x4, 0xe000000000000, 0x0, 0x2, 0x0, 0x58c, 0x1f]}, &(0x7f0000000380)=0x100) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x141200, 0x0) r12 = semget(0x0, 0x0, 0x324) semctl$IPC_INFO(r12, 0x0, 0x3, &(0x7f00000005c0)=""/79) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f00000000c0)={r10, 0x80000, r11}) add_key(0x0, 0x0, &(0x7f00000001c0)="e7e3f1b7d2d1f115193c4c33fca2832ba7bebc960a172a9e7e095fb81b4ff939fe6be9c4c0d12eccf84f573d4f01861ed4488d138689431e92d62a", 0x3b, 0xfffffffffffffff8) connect$unix(r9, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$tipc(r1, &(0x7f0000000680)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x10) ioctl$KVM_SET_MSRS(r13, 0x4138ae84, &(0x7f0000000100)=ANY=[]) 07:18:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x64, &(0x7f0000000040)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2) socketpair(0x11, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x4, 0x80, 0x3d, 0x77dc, 0x101, 0x5, 0x5, 0x1f, 0x22f9, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x9, 0xa8b]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r2, 0x4}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x81, 0x4) 07:18:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045105, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) [ 282.240816][T14864] Unknown ioctl 1074816053 07:18:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 282.285705][T14868] Unknown ioctl 1074816053 07:18:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8004510a, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:45 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="07000100030092d70556b82de86d489b85e1b24de2c2deacefac081408000000000000007274ec5f9a69c9410babf8ea43e278e279488d88ae26e1f36dd5266f2b302ef1d01d4ced320cffbf4fd4c7253ad48d7cc4059694951b3ba4076413d99ed9f5bdc3ff734bd09b88007e36"], 0xa) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001680)='/dev/ptmx\x00', 0x4000000000000003, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001540)='/dev/audio#\x00', 0x40000000003, 0x40002) sendmsg$unix(r2, &(0x7f0000001580)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000380)="d704217ee728e7804d2a9995dba7c7e6173b262aac79e5950ccec5fca848c14417f5fbb77c2ef6f510721b883dc4a4f14c81285673ff7a18a7dba753f0f831e254b4827f8b616a840a2b601f2fb9b788381b46f7a530062a21b60dc401a1e33e9f7bfbd0ace276be6b5835f68da2d7ba76ec858233d1b06b81754c600720c0e092ef1db5aa911f63e1fcbc843a8a34a66c2e62c1299e9b173201f3075ecedbb4b728ca60b8fc53df5ffdcf2a9b8cd411c1a4ada41819fa8a6a7ce3e6069403ecb9b340043eca92120143f3992e8b1657638869734fae2a7913e4dd8591824f5753ab8b63f0bc50519de6ba8c01724f363497f7a7fd", 0xf5}, {&(0x7f0000000140)="dc6475ef13f3cb87b8", 0x9}, {&(0x7f0000000480)="f2f6568e37e57f536d8212be86efbb16881f75d495ea0707d35c50d59d87cb022dd5f7c4466e2e1ff5fd6236c7ceeddf936b32b4bb4225bd031822ce143913ff5c496e80e65e5973a9a8261a509c5008603eaf4d47e9d74fcb37e099f51f2054d944df799e0d15a72ecbe2efe997663fb224c5f007f8e0e31c6f9544909d5bd26f65ddaf2bd04913851e4332d800cd11bb3fac5b08e860cf5dd8632a64302ed60cfa3a2317b038588a67e64f58c52b0061e32c81d02f1b137366954316b01ffacf1f244d068b368486c25c9bf63f95733e95316189834aa419b24ff9bf87393c1cf79cd35a8a3abb8c04b32b6952c8dd3d34d1c836742e0f338363ee233e1958fd0c1cca9540a2f69640bf063becfb541c867c907fa458a93e571fcdbe4001fe08791e9698bfadf4aa9898017ea4911d648d0b196ba742aa9d04d3d7639009eff4fbf8218c8007f8af351b4342bf3f49ca6bb581dafb9cc6307a9efd1f721b373148befc77e17eb3f7921ef8d41c49cdcdbedaec486309beeff010fae4e44fe26ea81ad56222811ea8c060e1c5b9f4cfd2ea7e848bd224390cb70197e75b80597226c4b68769088f8815619b45aa28d40613245bd924753afa6ea686ca5495d7e3d8a298da0525a9b54a210c2f9c3252cb808ba6c352ec3da447a3ef8a14f53f045ef9125d4607842f4e58bc27224863dbb70eced54e92998a68b86a5434b280d9901430c6069fca9c08942592d0e33171f79786477827a98a9a2d79ba7bf1391eae997dd4723e863555af825627b350ac32f2317b76453e76faf0ebac090782d9b4dfa9ff2633441ded3a086e5b3807b2c704d585026f1beb7bbcd44d0de9314020faec66594f0949423925ecda89a456a61d53e77fe851104768bb7fa01e76a3c483205a7682ffbc5226d7c8d2c4e34ea15dd51787df8436ca8f751bd9b95119416a65e2e446cee232d152343764e19722730ca05eb8d3c768ae56ba66ff0119e58dc369efcca305dc5d8f1d309448fca8c8a991bae942184a8eb1a98b6ea2b8a830b6770c65715ce8797cf05825b17eb1b901fbbe15655d9278bcec56f8555d15da257f0da71c0071b811307f3414640512e460e2191330314babd5b1cbb25196459d127dfdad6be73523b850ef30cf501022011f175739844e6e098f64d04848064dbcb531d2422925593e75e645b7aa7d151e2d3567c881db5d4787b33513ce929a1528f8065bab82f7c0496205b8bdb17a91be038e616810f765edd8911d743cb513947393e9a849e66011bd8203aedeeec89d21200490298a68d2c2b8de47c2e9561f7f8fb9520ed2355a2283bdcec244617eab76488130f0c5506f9529561eeaed1e12b066e66082730333ccc0f3d1d52773aebc9316d642746d1303f1177e2bcc12d99202792c546a9e5b418c372dbb899b4672285e8060d770b298d74368416b044e9e7abe2dbe67142afe698271b44af448a18aa7f78266c65717ec079dedea868bcf5d513d7b4708049633dc3c09f0febba2f50fd7c038ae8ff48ec8636d6909a446a69241769052f33f875616db9c4e4ebc3bfb947a8df0f6bfd5cbdb441bbef8d16f5da66e2e2ab9242dab55d9133cd183a089243d73b28381b4513a85eccf4538e310ea661f183e85c410a6b82b59d3ea8dd994f5ef68939737e258dd14fce23e0e3e9897e5a0d97480e21c47ebc63a6b0a76265ce01e8c63a3b7bb289eb188f4b982a61ccb4ef4c53b47a90569d66f22f7cea2e0229179d69143142c4caa726a0eb9ed9f15395062a44eed96b2ab970f5d92ee472d23ef7482f79d10a0cf6929a5fab0b5973b5149ba4b4f089f23d716072915e724661643e4f646dba417974e7ee83615b3fb0e54c0b4b12fa7d4c8a419ec03e706b6aabc3f6493b4155670178a6e8bc7195d5f0ea648ca5f2c7e6e01d81f4e2ecc89a75155627c95e9436a4f2df30dc5f9c2045ac5e8b03b2635d12803bb087c20f9dd0bbb7348675710ea3d6ad5acdd8d63e252d1c4743ca504277fbd327ff4f684e986cecb5e626e5d2b1514b333d26bd5ad4b42b5f8760b4a63aabfea9ce01f98d6ed43127c3170e3cc96178d6ee7a54223442054314ce7a23fea5dc9790b0aa3e0123a78fcbd9add6959ca40b402f1e0147d856f31dcc96dca77fa38445671d7f12ea9663743b5323b51616b6423a150a6ac42443bfe8f4b45b2aad5ea760506d17b9fd9363d26b1d43dfc68ab88eb5833d636b6cc6d4e52d32a64552aab82c7feff6b3fdf7d418166cb1d46406d8562f736f46d1f1c4f5bc899750bce6238cbf636510f8935637a1de9c006ddb643f68710d4c717c78a32e5f5f62476748b51daf16163d59bc2b2042e7a40374f85249011e7f87c396512b2df4c4296e58b1c58701a3432dd46494bce11ffa91046e9c370dde4a6fab1bd196611a82dc1c2619483171df91334031bd3076658cb0bd8bd049898ec906e42666d1f3ccae29a28c3d8965bda1e1c2ddb23fa472f99244929a423e13028166dc7f7335e36a36a85784c5fde4d46d8abacd9b593cf29f74b4c7211c5ae220af09e46c788c845422eb34a64fd6ddaaf1840fe3450f2b5c4f9cc0cc249df9f1396d4cb0b9e48ce1a642ec5194be21817c1bce2e452f43fe4d329a34d59d59228d890c45d0c8d6e9175d6792d917dc0ebb9846d9326c0669e8914b182a11729593b902412d6ed021c593a6c071aa2bbde218063de2d3929709aa69ba613927d708a571e1b7d283d062fe1cf757aac928fd62a3d4ed709af42ea2bfeb9e4945e5cb54b24ed602d7599ee3b18d35a7a903d1b0c47591f6e2783c7bc596bc8592048062c1f8e10e378c4e9e47978e1ff44a0597fd142cc1958457c7b949c0b97802243ad99557a3c261d0dd0f76f81449e864283dbaa6630a17817d0ba01575458913c556cc35273efc2cd388f858ef71f06d786b5d335706d876672d39e954a557cef029dc8ae5cfc59a40c0785be06797d7df09e0cc0a139af2fe2b4354b28ac86e238b61a29a86617d601d20a849d8ac5632af22fc2302fbe372119be698f0d0c316b2f437e9cc56d7004b38ab8de3edb2d798d8dbe5ed85a502f7123d387f10db14ce4b808d8bcf16f9912da8590d3fed65575645cebada0fd66d53c9596fced586fa0481c3a417a39217d0d4219f7d87a9e0c2acb16706c21fe0fdfea2104c22211036ccf93fa785eb81ebc41631bd34d35a75fc560689d54facb71f41a65575339cc13d8b1a5759ded95c9cee8ddc96e12be98fe8a8210e17eaedb167bf55c9fa89484d828f3030d9be8d8fb6b895bad0f5dd21c1d7fc880d2d027721e66616c44a5f19e170a964b3e092e79b466825812fde5f847804582492fe8b6e71de7447423fd43630bbe287b41928292005833bbee4ae9539fb163481398b8a7a77a63a9f17bf807725d718286172b443f254c309f80353461bf397cc7fd6a58f2d5aff9852bd68d793d891549bc06ec9eb2ca933137ac48bc8f1a12e76baf18b9ac8f9bb381f1ca7c2276779466ba5582b572c602c70882d9cb8eeaa31e256c7332699eb1e217cd33c9a68d052982a600264386f031a6f903941ff95e314fbfd4a62a6b5024870366977e246f461e87aa3b829087a41d87f38fa09ca77a5d2c45921592ff1ec67424714bfa510856a7b91168e702b3f2ffabbbbf6706b0321bb48f88cc9e6db695e268acfa4ab226b6bfbfe03e87710bf65d8711e0db14c6f9d7aa2ff16777211e658e1679b9b12d556d5f6a201f8a2ee5dc238fe37d99e7da233dad9f7f41bed8156de9f2cea28fd7ae7e00187d27ec668fd9d045201c6180c12f28eaf84edc318d06cc41028503e3d56fc54e0545cc0f3da91f3e4a95e4b27280eb81ad5adf125f9391ed1c6c0839dd1cd681cb75b22188b4448f36fef6c761b320a2098164ceef49d042755cfc6447a0acf72c7041f02883f917b0d9b073b4b172283ef80a62eb722d31d3e4c122bdabfb9fcfad1035a364fe536105dd1a7502aa22d9a4df5f012db11daae9945505bf3121bcca3536e0456f5ada3c2a5b6adc226c53d247ec780974dd2448144def01c52f2c63cd1e323763786b3fcc8c0e12f9ad515f22b06bfb75a7a9a9fda3c345bcee896602a42f460cc455d02c22b10d08fea4f7b222e8e9be78bb78047136d04c0b729c5e3da0963fba1a40c1f5381ac2a60a1b3ef6fdda17d9739ad0c803194125cff0965d771050fb2ab96d21ca19e4e84c48a8d8ce652561d0cd28e50aa53cdacb97ad7fc4c2dba585d514b0b441c6c8fdc37d257ffa36caa6614236ecade3c0223eb5c58d29c6973fe0b4ee39f699312302fdba2eb29943d4b6c54f267e45a35feb41c7f20685159d82fd7acf4d46ae21c1778c581adb92ba1b5a60cfe7c9adeae126b82a9018553bcf5507886f5ee203d498690087d375845ce32a81ad62129df9cb4a819702d30e7307e8f31a6c1554b36734b6b05bd3be89c676c790a381516fe716400b971c2107d64236d8d8bc0d50da26157a405ecdac78e5331af40ab297f75edda751c528ed94b801bf9cea79283141a64d91896d40f780b51959491715129c7e0ebbf3ee3a94a772330aa99df10ffbeb8e8909ac570eda81353904737a2d84fc5e48a2fab8a84b22b844bc1b8970c3edaeb5a94714acc22eb55944efe9290dfe503f57e608e203651598dc0fff7042cb5a6bc91c43c3895efe459e76f0123b644df0e4d9b86937cf1200f3fe3ffda05a84f3a181a5bcdb97a6ce1124d4e300419daa1190b0e2bb13f08ad22e4eb01602fad28eb138349da734668a5345c5c1ecfa9f844e34cf97dcf4d5a00ba75bb7bdaec9d6b8cf96c593efba3bc264e90b98b404bdd89ca43b7972b37c2530cee943f2294206b55cdc0267fa94874286bb6c85d51a9af707e2c2568747dcf9846f675184750d3d3b83bac6efc84e4646647809c5fcc839cc0593aec7aba93ac57d97f3b6659debde57ed2f22940fa0953e42f852dfdad979c0e78933defc259d166ebad6041bff29df1c6ec3b7587ac7115a2c68cfea080ae5ddf15b64602ee026e8162ab3f1b7d0e61ca73a67cda55de8531b5595828a648ea343e791e71fc8e0a089aec1b1019e73dd0ceccc8babbec163352979769555701c5e6ecbd4a2f962fb77685073d2e6cf69f7b1ac11e3143e40c991116e66276d944065898d5100f374863e743b1383f6162298358b4c6f4ebd42c46658b54a6512da9edcfd3af142257446bed832fc7323421f9d5e4ce9f97a5c4765115cbde44c604afe691fac87433ffb59777d22899024692540a84405076a2593e814262f9e26db437cb57bfc15d4dd84868fb09496362f181a915006892f10d86c732d1430c5eb2fe4eac6abb983561f8b52bfacdadc93e675f3837abdbf80fff2b0b82a9eb9593ddf8abb6d5eebb6d510e189bfff363b737972cb5e35a30918ee855e431a2750d859dda04876dd2502ec9165e5c3dc475b0b15a4c53fe92ca9795a4dc02c22c80755fb6eac7019df718e2357842676a25eb5feaff8b23bcf4f5956d64ce501d4c0ac8226e098ab92ae5432ef856cd9dfdb7a9f8c6441646a172da44b53081615967489edc9d2b1e3450c1591e10be0ebc3b0e03b32dfcf86d76fbbee1064ad154eec0f63ebf34ceaf99d46f96418b3eb9d432ee19882e3c44a8e4715fe7e66c474cd9c5f01b4d041dd637ed9ba1e58629ea866c013b11a91b5202aca2a0649b35549e97b94f8b271168dc950307c2a5a72726ba533318f9ef1179335810361236fdff963ebcc42358d3c", 0x1000}, {&(0x7f0000001480)="f18d82a78426ef337723e77e0fdde71c6ec6e1e4ad3ff06252eb08a603ccdd4c723cbc6078ee1be340c9bc00db66514c6ef7bb4381a82b127f16ee47a8a3396a2ff0d920811d0dc8d8d9e8c9799808347581da028d9524980eddefc106293df3f31f69a165096b79fcee411538b9c192c954", 0x72}], 0x4, &(0x7f0000001540), 0x0, 0x40010}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a45323, &(0x7f0000000240)={{0x71, 0x7}, 'port0\x00', 0x40, 0x400, 0x8, 0x2, 0x1, 0x4, 0x3ff, 0x0, 0x1, 0x7fff}) bind(r0, &(0x7f00000015c0)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x300) 07:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], [0x9]}, 0x45c) 07:18:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 07:18:45 executing program 5: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6cd) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 07:18:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8004510b, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:45 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x1, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000000000000, 0x10, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6') getdents(r2, &(0x7f00000004c0)=""/180, 0x100000238) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x80000, 0x0) getdents(r2, &(0x7f0000000040)=""/60, 0x3c) getdents(r2, &(0x7f0000000ea9)=""/407, 0x197) 07:18:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 07:18:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/184, &(0x7f00000000c0)=0xb8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}}, r3}}, 0x48) 07:18:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045113, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:46 executing program 5: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0xffffffffffff1ffa, 0x3b}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r1 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x77) 07:18:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000400001, 0x0) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000100)="1babf9ce455e1a073cd3d94d5f2490c42c49bf673bc8482f65ae6d9bc78062ba7feb8da6c8bca955a942223da3d8cf19670d9dc2b805e539c07b6aaaa953729940da3cae8c0958c642e27aceecf0", &(0x7f0000000180)=""/64}, 0x18) socket$inet(0x2, 0x7, 0x8) r3 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x400000, 0x0) kcmp(r1, r3, 0x0, r0, r0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfff, 0x109042) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)="ab3eee1941ded2fcec8529306128660785a21230c8c07b17c6d7b89c5d1ac19267b6918faf9afe7b9c591c5faa49485239eb98e4b6d242b2453539b723e754d5e3c70fb8da6b2014f7f97220fd4e") fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x40, 0x6, 0x5, "d42969e865762d5bf43255fbe9d183e7", "2594a1dcdd668fa261cf48147103688950fb8377df014c0930f17a9969ad68f94abd87e30478db1dbacdb0"}, 0x40, 0x3) 07:18:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/ipv6_route\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x1, "32e2f6f040188272"}) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile64(r2, r1, 0x0, 0x4db4) 07:18:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045430, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:46 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:46 executing program 0: socket$alg(0x26, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) pipe2(&(0x7f0000000680), 0x0) pipe(&(0x7f0000000340)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080)={0xfffffffffffffffd}, 0x8}) 07:18:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20000000003ffd, 0x0) ioctl$PPPIOCSMRU(r0, 0x5433, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$EVIOCSFF(r1, 0x402c4580, &(0x7f0000000080)={0x56, 0x101, 0x9, {0xfffffffffffffffa, 0x6}, {0x3, 0x6}, @ramp={0x20000000, 0x0, {0x7, 0x401, 0x7, 0xfff}}}) 07:18:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x8000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff0001, 0x8000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0xcb, ""/203}) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x2000f401, 0x0, 0x0) shutdown(r0, 0x1) 07:18:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'yd\x03\x00', 0x43732e5398416f17}) dup(r0) 07:18:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x800454d2, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:46 executing program 4: ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)="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") r0 = dup(0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0xef, 0x0, 0x0) 07:18:46 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) 07:18:46 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x8, [0x8000, 0xc9, 0xf8ce, 0x0, 0x9, 0xd3ee, 0x1, 0x8, 0x1ff, 0xffffffff80000000, 0xd29, 0x37, 0x0, 0x1, 0x3ff, 0x3, 0x81, 0x8, 0x3, 0xfffffffff1f3be44, 0x1, 0x1, 0x3, 0x8, 0x9, 0x100000000, 0xffffffffffff0001, 0x2360, 0x7, 0x4, 0x4, 0x10000, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x62a, 0x2f, 0x1000, 0xc1b, 0x8001, 0x6, 0x7, 0x6, 0x2, 0x7, 0x61]}) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x60100, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x1344, 0x7, 0x3, "7f95ea172d1226dda59ac910769ae78d5262d4791704cb071f41f06696185635", 0x32314d54}) 07:18:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8004551a, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x2f, 0x847, 0x0, 0x0, {0x2805, 0x7b5f7}, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @u64}]}]}, 0x24}}, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x9) 07:18:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x60, 0x0, 0x0, 0x0, 0x11}, 0x98) r1 = dup(r0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0xa000) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="b96ad12357702606ac8b4ecc92136edf1f713df6789e4fbfef13b531f3c277ac541128bfaa1de878ff9eb48eb7b38d3e755e54dc11eafc6e425a9d7d33b52a27ceae9238961c764553190a614a54118a69891d69fa7344f2885e3a5a3bdafe3ed442b3115cfedda00fa2e1216e3d6cfe2764d327d49f656da241013f4e27d8f98585e99afd86c87a2f258eee62c06d11827add15f89a9fbac938ab60bf392120a755cfa896a1d17f2f6e557d9654b6f3a7dd1d6992ded5ef55503cc078af8aa2f0e4a2fd6e7e78759b8e28502615b558a0de6ae857cceefff17e8ee1", 0xdc}], 0x1, &(0x7f0000000300)=[{0x100, 0x0, 0x0, "abf850d93a0fcecace35460baaea6191074da7994e1f7cb491023e05f80f6087267dd67f5ef51cdb873c58ef90f9dbeca8802667b23c8402c3a411248c266954ef897d32f34cf830fa5d467d3ee810b77190afd945a33d648a230687ea905c9ece9c3fa04cd3f5c9d104239f59904df0876424f881bea23e3cec8dbf96ac770a6b05d32ac22f59ae6cf747bc4a3800c7d0347dbf5acf132543b78c01ca153629fff0762e11c040e15c4b40b6f4b4a7d8fe79d64987a2a9190425cdbe608c91b64f465082ad90cf13945e47e1386ee9b5b13aed29b7b36393c7f67cd084429761367920312be3cf3e61ab4479710616902dfaf9"}], 0x100}, 0x1) listen(r1, 0x7) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) connect(r2, &(0x7f0000000580)=@hci={0x1f, r3}, 0x80) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000040)={0x0, 0xc, 0x4, 0x100000, {0x77359400}, {0x5, 0xf, 0x2, 0x7fff, 0x9, 0x1, "9bdd7366"}, 0x3, 0x1, @fd=r2, 0x4}) [ 283.744360][T14988] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 07:18:46 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80086301, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) dup2(r0, r3) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:47 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xc0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x1, 0x4) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)=0x32) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x7ff, "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", 0xad, 0x8, 0x7, 0x7, 0x0, 0x6, 0x7}, r3}}, 0x128) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000b00)={&(0x7f0000000200), 0xfffffcf9, 0x0, 0x1, 0x0, 0x0, 0x8094}, 0x40010) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1]], 0x8) 07:18:47 executing program 1: r0 = socket(0x10, 0x2, 0x3ff) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x5c, 0xfffffffffffff801, 0x0, 0x6, 0xffffffff80000000, 0x1ff, 0xffffffff, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x7f}}, 0x200, 0x8, 0x6, 0x7, 0x400}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000740)={r5, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x5, 0xd064}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) r8 = msgget(0x2, 0x40) msgctl$MSG_STAT(r8, 0xb, &(0x7f0000000840)=""/84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001}, &(0x7f0000000580)=0x10) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000b00)=0x2, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x5bb) connect(r2, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000380)) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x4e24, 0x0, 0x4e20, 0xf9, 0xa, 0x80, 0x80, 0x62, 0x0, r7}, {0x2, 0x5, 0xffff, 0x7, 0xffff, 0x1, 0x4, 0x4}, {0x93, 0x100000000, 0x7c0000000, 0x9}, 0x400, 0x6e6bb5, 0x2, 0x1, 0x3, 0x2}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x3, 0x2, 0xe5, 0xff, 0x8}}, 0xe8) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x4e20, 0x0, @remote}, 0x0, [0x0, 0x0, 0x69c, 0x0, 0x4]}, 0x5c) 07:18:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) syz_emit_ethernet(0x10e, &(0x7f0000000200)={@local, @random="e7dc0bd148fe", [], {@mpls_mc={0x8848, {[{0x1, 0xc800832, 0x4, 0x2}, {0xac7e, 0x9, 0x0, 0x9}, {0x5, 0x401, 0xe7d5, 0xffffffff}, {0xf6, 0x0, 0xbb2e, 0x5}, {0x8, 0x3, 0x39, 0x7}], @llc={@snap={0xab, 0x1, 'd', "00dd39", 0x1b, "4ccb67d41d03be2cf04614ca7e3425c609ce3769cdbfd7b51ff69363e25c282f0a82a8b51847e3f561711c3e7bec9deccdd26c3a81b33ae00f6dcaff9cfaacce7cb79003962969690b1421905d4f496defce75ee8d715a26232d8e2edd315a317f744a8f698eb16050dfce899df43b3cd50faf38543d1e95796fcb45d2a94ebeb8e3a9e9f8f3a98072b769389ae9ecbaa7017a924f166d8a39e56edd43ada01e8b2e0ed12fa6a097b2561226eab6d0dc9413a2bd689688bf2e96f5ddd71da0d62e04e4a4e2a11542f4113918dd8399cd1d591fb2c88492e10e56bee5721d4c8ccdb95124"}}}}}}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)) 07:18:47 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000480)) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 07:18:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40002, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 07:18:47 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x801c581f, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r2, r0, 0x0) 07:18:47 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000840)="2fc35912") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) mq_timedsend(r0, &(0x7f0000000100)="c094b7f1da32b1006685c33473e80d888497949eecc78378839d6eaae43be70e8fee83d7d26bf9faf209da219e992d12a2228fc731a47e1a148aa18c5caccfa356486fa3e0150ff957935c5c6724b28bf79b1e506fe9af39a338b86f5903dc54c34a4541ff398145b5bce85ca8b9b26bdc80ced666a48f61e8926a40211678353b1bedd9289067faa8d487e5674a9cec4c296eda9402e0ed3d626f596588125e4c6092c599faf575c6ecf7e0fb", 0xad, 0x2795, &(0x7f00000001c0)) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x210, &(0x7f0000000840)) 07:18:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_matches\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "1997814ac701a95595020a5c53b5fa68a295a72a735aa648e67a96ca5020b8dd6c5ec31ec81bfa31ea7b83396453f383e7c0dbf497a7fe70d797c32cef42833ca546c51bb9300c84055f17f0cf230060bb0af13bc9fb85bb1fb091072054dfffc252c2034f8653722aaf9dc55651ea971920ef11e7d5a4b9c0f5cd057d4fbc053a266ec803a91dd220e1e4079b96fce65429875be672e799ad19525bd4184ee0db297ac768672ca87a45b01ed5"}, 0xb1) 07:18:47 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x802c560a, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x3a0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000180)) r2 = dup2(r0, r1) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x0, 0x0, [], {0x0, @reserved}}) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x900, 0x42) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)={'syz0', "b90b3c46c8a7a1cebeed7204233292718fd4230037f04132ddcb2dd3da6b98b0561b1245653063bcca67aca6724241d17805d5595b880471f2a81543a70e3ba26ef7704d834b866bd111c9fafb37bdf51d9b5232fad4e31f9969fb21806f45cca1f85b92d16fdbaaee4d5e4cda2b45399d86898309f6564a1834e50373b26aa4bae80d76234862794ebf8c4bee50e4b576767f3ea53c09da8474d94d348f93ad79a68d5d"}, 0xa8) 07:18:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x4, &(0x7f0000000380)=0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) io_submit(r1, 0x0, &(0x7f0000000a00)) 07:18:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x50, 0x3, 0x2}, 0x5}}, 0x18) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@random="57732c78d9d7", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x2, 0x5, 0x80, &(0x7f0000ffc000/0x4000)=nil, 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x4, 0x752, 0x8, 0x2, 0xfffffffffffffdc1, 0x100}) 07:18:48 executing program 1: chdir(&(0x7f0000000200)='./file0\x00') arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000001) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup(r0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000001c0)=0xfffffffffffffff7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x16a}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x9}, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getgroups(0x0, &(0x7f0000000300)) geteuid() write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000240)={0x18, 0x1, 0x0, {0x8}}, 0x18) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x12c) r5 = syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6360, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) 07:18:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x810c5701, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:48 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) io_setup(0x81, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f0200003f003f420f000000000000ef000002000000", 0x38}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x3, 0x8, 0x3, 0xc39d, 0x7, [{0x7fff, 0x1, 0xffff, 0x0, 0x0, 0x2002}, {0x40, 0x0, 0x2e40000000000000, 0x0, 0x0, 0x1400}, {0x7ff, 0x0, 0x20, 0x0, 0x0, 0x300}, {0x7, 0x7de0, 0x8001, 0x0, 0x0, 0x204}, {0x1, 0x69, 0x0, 0x0, 0x0, 0x408}, {0xfffffffffffffffe, 0x80, 0x1, 0x0, 0x0, 0x200}, {0xffffffffffff8000, 0x7, 0x8, 0x0, 0x0, 0x2}]}) 07:18:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="00b7dbcc2c291ee2dce0dde02dd51f2a000000000f000002000000040002cd3ec163088f5831ec2f88a92da03600180015009a51eb00e50008000011f6d9ebe9227d155f08d8b14d97ac8b1f7e2f486552151702c300000000000000001966ca2f99e4399f04013af6a71280bf8c0670ff52d3b690aa3f2f62f85adea8391418d1f0290d9483fc25481245193596fe3f99cbdd64e2c8f9f21c2b6317675e949b3c34c6730990d903cbaf8b226fc0d34380e46bbac5b1a5e675711c0fe7773ff295"], 0x2c}}, 0x0) 07:18:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x10100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000640)="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") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd070000400b0000000000000000000008fc0e004e23000008000b000a00000008000614ff000000080005000300000008000800043dd0000000000000000040fc63577dc3517c1e59172ae6ba9bc3d79a092684fe4f08f91f8afd6da2060cd696f4c764f4883f171fec8cb5944ba7b0"], 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x4004080) r4 = dup2(r2, r0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x100, 0x1) ioctl$RTC_UIE_OFF(r4, 0x7004) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0x4, 0x0, 0xfffffffffffff001, 0x7, 0x3, 0x7fffffff, 0x2, 0x20, 0x4, 0x68f, 0x8, 0x100000000, 0x1, 0x9, 0x16}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0xffffffffffffff9f, 0x30, 0xfffffffffffff2ac, 0x9}, &(0x7f0000000400)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000440)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) 07:18:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000580)={'nat\x00', 0xfe, "994f10f4169389117b48c52c3c1e0908b58c0c65b5f9b22a7372fea613593317ae9db1601322ed0c015bd3a474da3efa6bd65f8c5066995d66ef47e679cb227c73f2dfdc0dcf96f452cd64d93ef40202cef04c931a3af031786d1de51bb768e39b230470d679d98a8dc1aebc125bcb8783b0750bcf757d8233ace3ed7653ecbbb41cc610eef4969b1ef15fd563cf25885465d8f8a430dd69079b1c1efd0ffff8721e820a632975c55c4d0d7fd1d46d0336670764676a533ce636a7c520d78ca952770593e3d37d88bc05c98f1e0da4ef60d9f1ecc90e8ddb5435d5cd2c44648a2f7122c10b8a2fbd1d89d6621d74f2c5ffd74c0f1f8318e6802c0f0eadbb"}, &(0x7f0000000280)=0x122) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1, 0x1f}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x302, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x6ee1f56b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r2, &(0x7f00000006c0)="886690e8657e7f5079f8eebef5664ac74d17dae432adfc684fc5505d28ce82a76dd6d416343a2042b9e2e9d979737aa3de229f4d7874cf4577d2764372e1b39625412e3c7771be1c2655dac5eab0660bae5327438272b6739480a8b2acfa16310216fd33a54e37d8232e208fcb0a10c755342a1957a07f291bc568ad42ae3d960bc92712e0e4d909eec7859974983ab6c3a8701441cc8f4b2e4d409f5f490d4093", &(0x7f0000000780)=""/184}, 0x18) 07:18:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x81a0ae8c, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:48 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000001140)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200a00) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000014c0)=ANY=[@ANYBLOB="060000000000000000000000000000000000000000000000000000005f5f66f84b34c87063d07234584cb507b903ffaad05374047c360e61249fde766c1626d6e94365930ee3f3a6b3461ba8c5b6caecfcd39857466a56538cd9ed84e1676e10fc21f4ab7b38483fa8dbd705ab49e7c0f18d31a6305ab68462ed6c65e95f467a099dc971d5d5bf4d2039ac0df39dd2aefe6f051ae536c2fa5fcec7d787c892a7eec81cf2ee86a426e25c9fefc71d6bcb1e"]) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x400000000ffff, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001200)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000001340)=0xe8) getpeername$packet(r1, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000013c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001400)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000001440)={@initdev, @rand_addr, 0x0}, &(0x7f0000001480)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000002980)={@rand_addr, 0x0}, &(0x7f00000029c0)=0x14) getsockname$packet(r1, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002a40)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002ac0)={0x0, @empty, @initdev}, &(0x7f0000002b00)=0xc) recvmsg$kcm(r1, &(0x7f0000002fc0)={&(0x7f0000002b40)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002bc0)=""/209, 0xd1}, {&(0x7f0000002cc0)=""/172, 0xac}, {&(0x7f0000002d80)=""/209, 0xd1}, {&(0x7f0000002e80)=""/51, 0x33}, {&(0x7f0000002ec0)=""/83, 0x53}, {&(0x7f0000002f40)=""/11, 0xb}, {&(0x7f0000002f80)=""/39, 0x27}, {&(0x7f0000003080)=""/67, 0x43}, {&(0x7f0000003100)=""/113, 0x71}, {&(0x7f0000003180)=""/139, 0x8b}], 0xa}, 0x120) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003340)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003900)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000003a00)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000003a40)={@initdev, 0x0}, &(0x7f0000003a80)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003ac0)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000003bc0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003c00)={'syzkaller0\x00', 0x0}) accept4$packet(r1, &(0x7f0000003c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003c80)=0x14, 0x800) recvmsg$kcm(r1, &(0x7f0000004000)={&(0x7f0000003d80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e00)=""/51, 0x33}, {&(0x7f0000003e40)=""/211, 0xd3}], 0x2, &(0x7f0000003f80)=""/70, 0x46}, 0x102) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000041c0)={'team0\x00', 0x0}) recvmsg(r1, &(0x7f0000004480)={&(0x7f0000004200)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004280)=""/148, 0x94}, {&(0x7f0000004340)}], 0x2, &(0x7f00000043c0)=""/165, 0xa5}, 0x61) getpeername$packet(r0, &(0x7f00000044c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004500)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004b80)={'tunl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000004bc0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000008180)={0x0, @loopback, @broadcast}, &(0x7f00000081c0)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000008200)={0x0, @multicast2, @multicast2}, &(0x7f0000008240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000008280)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000008380)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000008d40)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0xc0000480}, 0xc, &(0x7f0000008d00)={&(0x7f00000083c0)={0x940, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x270, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xe70}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x157}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x88, 0x2, [{0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x140, 0x7ff, 0x10000, 0x1000}, {0x8001, 0x100000001, 0x9, 0x8}, {0x5, 0x2, 0x2, 0x85b3}, {0x2, 0x3f, 0x2, 0x100000000}, {0x3, 0xa41, 0x0, 0x6}, {0xfffffffffffffff7, 0x8, 0x3, 0x401}, {0x1f, 0x81, 0xffffffffffffffb4, 0x38}, {0x8, 0xfffffffffffffeff, 0x3, 0x584f}, {0x178, 0x80000001, 0x8, 0x80}, {0x5, 0x9, 0x8}]}}}]}}, {{0x8, 0x1, r16}, {0x1f4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x128, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffc}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1a7aa89e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r25}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffc}}}]}}, {{0x8, 0x1, r27}, {0xa4, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xffffffff, 0x1f, 0x80000000, 0x4}, {0x9, 0x1ff, 0x0, 0x8000}, {0x9, 0x3, 0x7fff, 0x2}, {0x0, 0x5d74, 0x83, 0x10001}, {0x9, 0x0, 0x26b, 0xeb}, {0x10000, 0x8, 0x9, 0x7fff}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x940}, 0x1, 0x0, 0x0, 0xc441bbe2e324b077}, 0x4000) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x54) r28 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x20000) recvfrom$unix(r28, &(0x7f00000000c0)=""/4096, 0x1000, 0x2000, &(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x4) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 07:18:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400040, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@reserved}) mkdir(&(0x7f0000000180)='./file0\x00', 0x1000000000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xc6\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\xe9\t\x8b\x1b\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWf\x01n\xfdX\xf2\xc8\xe21\xeb\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0x0, 0x54, "71bcab9dcc950ec7b044846ab1d75734c8fc565a732741e20a34a8c46f279f1fb706e8e62001ae34ec0cd042b7a077ee343096b92f3073c9bcd7c13025654977a9af4ee8833f30e918d371fb0abb148eb3f12615"}, &(0x7f0000000200)=0x5c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000300)={&(0x7f00000002c0)}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r4, 0x20}, &(0x7f0000000280)=0x8) 07:18:48 executing program 5: setxattr$security_selinux(0x0, &(0x7f0000000400)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpgrp(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40080) r2 = dup(r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000001ac0)={0x9, 0x40, 0x3ff, 0x0, 0xfffffffffffffff8, 0x10000, 0x6, 0x0, 0xfffffffffffff001, 0x0, 0xfffffffffffffe01, 0x9bc, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x100}) socket$unix(0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(r1, 0x8) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000000)={0x9, "954b7ee2b66ed030a4da558fb23c0e6fb12e19cebfbb619804f7122a857fa3ae", 0x3, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r1, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000200)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008080, &(0x7f0000001980)={0xa, 0x4e23, 0x5, @empty, 0xceb0}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040), 0x0) close(r4) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) 07:18:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8250aea6, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r1 = gettid() ptrace$peekuser(0x3, r1, 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 07:18:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x446) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8, 0x11}]}}}]}, 0x3c}}, 0x0) 07:18:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/169, 0xa9}], 0x1, 0x300) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10400, 0x4) 07:18:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r3 = dup2(r1, r0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:18:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0044308, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045103, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:48 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_selinux(0x0, &(0x7f0000000400)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpgrp(0xffffffffffffffff) write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x1, {{}, 0x81}}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40080) r2 = dup(r0) socket$unix(0x1, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x20400, 0x0) listen(r1, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208200a1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xe0, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x478}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4080000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xe0}}, 0x20008000) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x3, 0x6}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000002c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000100)) sendto$inet6(r3, &(0x7f0000001940)="138a3300cf3dac7dfaf9b356d937e1f0d1df07c1", 0x14, 0x24008080, 0x0, 0x0) close(r5) [ 285.588880][T15117] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 07:18:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) fcntl$notify(r0, 0x402, 0x8000001a) ioctl$RTC_UIE_OFF(r3, 0x7004) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000140)={@remote, @empty, @broadcast}, 0xc) openat$cgroup_int(r3, &(0x7f0000000000)='m\x00@\x00\x00\x00\x00\x00\x00gh\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) io_uring_setup(0x69b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2c7}) 07:18:49 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc004510e, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x105200, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r0}) 07:18:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x80, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f00000002c0)) r3 = dup2(r2, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto(r4, &(0x7f0000001780)="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", 0x2d1, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r4, &(0x7f00000001c0)="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", 0x412, 0x80, 0x0, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000000c0)={0x7ff, 0x0, 0x0, 0x101, 0x8, 0x5}) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x18, @dev={0xfe, 0x80, [], 0x1e}, 0x5}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5, 0x48000000000000}, 0x8) 07:18:49 executing program 1: syz_emit_ethernet(0x20d, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000000000000c1260a7725cb68b0000008060001080006040001aaaaaaaaaa00ac141400eb5d"], 0x0) [ 285.980002][T15151] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 286.033133][T15151] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 07:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000070000000800000004000000132ae6b567882e7a0d4291bb8098cebb6604592cae9d90e5d621e7ae51a2d0acaecbc6b655846e2cf48fcb08a6cb8aea9379df96d5b6f2872ee82cf1deeb392a78ac6f0a8343ed0bd3a455e8d8365bcbbac0388994a738"], 0x1c}}, 0x0) 07:18:49 executing program 1: r0 = open(&(0x7f0000000500)='./file0\x00', 0x40, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000180)=ANY=[@ANYBLOB="875ed10e7ccebcdc00"], &(0x7f00000001c0)='./file0\x00', 0x0, 0x1007, 0x0) write$P9_RCREATE(r0, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x0, 0x1, 0x7}}}, 0x18) 07:18:49 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045401, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:49 executing program 5: syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x92000, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0x0) prctl$PR_SET_FPEXC(0xc, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000600, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x8000, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)) 07:18:49 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x8e, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffff}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x3e8, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 07:18:49 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x30000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) r1 = socket(0x410, 0x6, 0xa3) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x21) 07:18:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xe, &(0x7f0000000200)={@broadcast, @local, [], {@generic={0x8914}}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x0, 0x1, 0x8}}, 0x14) dup3(r2, r1, 0x0) 07:18:49 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045405, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "5f5b14", 0x8, 0x6, 0x0, @empty, @ipv4={[], [], @loopback}, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x62c0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000080)=0x5) 07:18:49 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045406, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000140)="72972878ee3d185f68c84ddd25931c8a3c46711b1d3eb1854b97ee8e890d0624d3a28c8eef8c7c8024b728ab210f06fe7bc2d5d1c3fcb2f580f8c2c8aeef43253b00f01b70fc6c1dea87b81b5a98aa300b80d86c25b92a0372da5f3fb6e0ef1d1277afd5809029d4e06d9b") 07:18:50 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x1}) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000600000/0x1000)=nil, 0x1000}, 0x1}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x4b7f, 0x6}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) 07:18:50 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x45000080) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x6, 0x7fff, 0xffffffffffff38b2, 0x9}, {0x0, 0x1, 0xfffffffffffffffd, 0x80}, {0xbdb, 0x101, 0x5, 0xe3}, {0x81, 0xec, 0x6, 0x21ee}, {0xeb56, 0x8, 0x2, 0x4}, {0x3, 0x9, 0xa9f0, 0x2c}]}) r2 = socket(0x19, 0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x1000000000e6) 07:18:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046686, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x21ffc, 0x1000, 0x6}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400100, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x44280001}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xfc, r4, 0x9, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffc5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1fcd}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x80000000, 0x58cb2e5f, 0x8, 0x401, 0xec, 0xfffffffffffffff7, 0x0, 0x1, 0x1, 0x65], 0xa, 0x7, 0x8001, 0x80000000, 0x7, 0x0, {0x3, 0x9, 0x6b6e, 0xffffffffffff2d7b, 0x4, 0x7, 0x100, 0x9, 0x7, 0x720, 0x8, 0xe8, 0x10000, 0x401, "c65156077b59e797227eaef3b8b9e20b6f0e449886a709126019ae369412bc82"}}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) connect$bt_rfcomm(r3, &(0x7f0000000440)={0x1f, {0x4, 0x3ff, 0x3, 0x2, 0x8f, 0x7ff}, 0x4}, 0xa) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x4, r1}, 0x10) geteuid() sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x1) 07:18:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) [ 287.069218][T15213] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 07:18:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046d00, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') exit(0x0) getdents64(r0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0xfff}, 0x28, 0x1) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 07:18:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101100) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x9}}, 0x18) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x4, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) write$FUSE_LK(r0, &(0x7f0000000300)={0x28, 0x0, 0x8, {{0x8, 0xff, 0x3, r2}}}, 0x28) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x7ff}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r3, 0x1, 0x2, 0x9, 0x8, 0x2}, 0x14) [ 287.118678][T15224] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 07:18:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8220}], 0x1, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x1000004e23}, 0x10) recvmmsg(r1, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) 07:18:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000140)={0x86, 0x4, 0x20, 0x4}) 07:18:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x40002084, 0x0, 0x0, 0x8]}) 07:18:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0185649, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:50 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000240)='map_fIle\x1a\x00') write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x0) r2 = socket$kcm(0x10, 0x4006000000002, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003300815fe45a0000185082cf0300a0eba06ec40092ff002fff0f00"/45, 0x2d}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') r4 = syz_open_dev$audion(&(0x7f0000000880)='/dev/audio#\x00', 0x0, 0x0) connect$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000400)=""/157) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0), 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b2ca86bac7e33f4301f7cd3d40ccd") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) msync(&(0x7f0000027000/0x4000)=nil, 0x4000, 0x3) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x2000000000000000) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x80000000) inotify_rm_watch(r4, r8) 07:18:50 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x40, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8, 0x100, 0xfff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x1ff, 0x7}, &(0x7f0000000140)=0xc) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='team_slave_0\x00', 0x7fffffff, 0x1, 0x3}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x7f, 0x3, 0x4}, 0x4, 0x1}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000280)) ioctl(r0, 0x81204101, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000680)={r3, 0x9b961fa}, 0x8) 07:18:50 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xf10, 0x101882) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x38f, 0xbb, 0x2}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r1, 0x5}, &(0x7f0000000640)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x804, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x140, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/125, 0x7d}, {}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/233, 0xe9}], 0x8, 0x0) 07:18:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0189436, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffffffffffffa, 0x6, 0xffffffff, 0xe44, 0x40}, &(0x7f0000000240)=0x98) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r3, 0x2}, 0x8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:50 executing program 5: mknod(&(0x7f0000000040)='./bus\x00', 0x800000000100f, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x80003, 0x0) 07:18:51 executing program 1: semget$private(0x0, 0x3, 0x141) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty=0x1000000, 0x0, 0x0, 'lblcr\x00', 0x4}, 0x2c) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000140)) fstat(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001340)="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") fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='wlan1mime_type({\xb6em0\x00', 0x15, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000180)=0xfffffffffffffff5) clone(0x210000004000003, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000040)=0xbf) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 07:18:51 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc020660b, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fstat(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)='vboxnet1\x00', 0xfffffffffffffff9) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x0, 0x80}, {0xa}]}) socketpair(0x0, 0x5, 0x4, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000200)={0x5, 0x7, 0x9, 0x100000000, 0x4}, 0x14) 07:18:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000140)) 07:18:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x800) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0xffffffff, 0x3f, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x4d) 07:18:51 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xf10, 0x101882) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x38f, 0xbb, 0x2}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r1, 0x5}, &(0x7f0000000640)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x804, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x140, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/125, 0x7d}, {}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/233, 0xe9}], 0x8, 0x0) 07:18:51 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc02c563a, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x14a, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x2, 0x0, @rand_addr=0x4e5}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x3ff}, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0xe80, 0xe5e, 0x8e, 0x6, 0x9, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0x81, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x80000001, 0x5}, &(0x7f0000000400)=0x1d3b78d0, &(0x7f0000000440)=0x4, 0x6, 0xb943, 0x20, 0x20000000000000, 0x8}}], 0xc8, 0x24000000}, 0x4000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x8, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 07:18:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x610240, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000200)={{0x0, 0x401}, {}, 0x1, 0x1}) signalfd(r0, &(0x7f0000000140)={0x5}, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.max\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:51 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0485661, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:51 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44d0400}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x308, 0x4, 0x7, 0x810, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x6}, [@typed={0x4, 0x4c}, @nested={0xb0, 0x6e, [@typed={0x8, 0x6a, @u32=0x6}, @generic="3d5178c681306571fc70837c94453ff7bb5c66de94fbe7e85e3381edc17df5387b6279faa56849d3a070157e539bc76ca3f2cdb327ade5f4b341cff5bd62867860563186c669d601705930187edce4d95626fd65ba6923e88d585f6e77c9fd302ed574520839b777b24d260a3eb489370abaa7debb02eb64ab", @typed={0xc, 0x78, @str='wlan0\x00'}, @typed={0x8, 0x81, @pid=r1}, @typed={0x14, 0x9, @str='vmnet0/wlan0\x00'}]}, @nested={0x18c, 0x1e, [@generic="aacaa07c7199740c46c853bc9926ebec14207d96f4f75e0608a99fb025f106d4efaa443db51bda5653a99574c45686a806251d574dad014b19ddec37ff8474750a39b7bd5241ff1dcbd2447837b828e9c813777eaa303bba3402d28641cf8caf176dfe5657ad86a3eced0e052a3f9e9ffc3554dbf580379485d0c2ea83f624f456f65b090d438f8e6e05117a2bb8aab98d8e465f5b9836aa2e47647fdd2f8d6b5acfd71c4e90ad0d08c52a498cd81d82a3c30936540d2cc7754758886856690d50895d65220079670579850de9", @generic="398d32607544bf6af336585290810213f0da5af8125a31c4fdb59ee52b214325bb30abb635021b9fb876005c188e769f72914428d5fdf04ab24aeb9b1b076fbd18dd105f305b67a994813f3b56fee213ef6c4c6646df3d73010284a07bf6662166efefa319edd27904e8aa89eca0387abbb76930629827644a3fb7d8dcb7f5c41238bfd2f1ad1b10c9474bdc9d11837a1576cb0e3d6ecb76fd536032ddaaaea5011c794802f9a937c4b3da563772da1bf24d11d2f543ddffea"]}, @generic="c302d5b5914dcbc1adef6a0464200bf5e352859b33cae0bf25dcc99c1b2ab8e7fb7175cc62152b3dfae38b95f567f9ac364e5512ba1e258330fa76769a16b86d06bcf1317af47c2b184aad5e5bb8ba5503a7093a3199e464e73cae966c648f896a0e5de7ed4700585eccc355ac8a0efe54a3eb4155ea061f093e3cd3166ac327675743ffd77d4beb069100dbaf5e2fa1ef420530b126ccd0975c9f", @typed={0x8, 0xf, @ipv4=@multicast2}, @typed={0x8, 0x9, @fd=r0}, @typed={0x8, 0x79, @pid=r2}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000080)=r0, 0x4) 07:18:51 executing program 0: clone(0x41bb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x13, r0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) ptrace$getregset(0x4202, r0, 0x2, &(0x7f0000000280)={0x0}) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={&(0x7f0000000140)=""/251, 0xfb}) 07:18:52 executing program 1: semget$private(0x0, 0x3, 0x141) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty=0x1000000, 0x0, 0x0, 'lblcr\x00', 0x4}, 0x2c) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000140)) fstat(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001340)="ba1a933a7f0c03fbbbdd69951eb5c14697f96dac8b62195b53cd29092c2e16fdf6d3286e3c4919e7b4e6171c221d142029989ed8326bffec78b5dd4e6f224098d7fefc373feea4f5448ba2cd5d388f6ed52bcdb0809c1a9ff4904c51a3d184050974872249637d559d46a37feac5e2125a3e81fc5d3ade26a28f0eacea63d4f9120f445f8ae350de046388fa0be681984ec94dddd2602814c75fc6476e5aee6c572e66baa0f81650bad83d5b05b922c6e760bb876dbf70606c63b634fe002ad535283aeab71425e0e9149062ce3798442159a9abf9cc08ebd32ee7dcefe5f6824c4d0bc7bdb750bb0760d5ca4d641e2a4df613ba8563af1936029a9790230cf6") fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='wlan1mime_type({\xb6em0\x00', 0x15, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000180)=0xfffffffffffffff5) clone(0x210000004000003, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000040)=0xbf) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 07:18:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0585605, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x4080000000000000, 0x3, 0xfffffffffffffff8, 0x0, 0x14}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x5000aea5, &(0x7f0000000040)) getsockname(r3, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80) sendmsg$can_raw(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@canfd={{0x3, 0x40, 0x977, 0x7f}, 0x3c, 0x3, 0x0, 0x0, "0a1bf611aef6ec2d6a9077b5aa666435264b803f9aa26dfee85bb28a48c5c096811d2d9c88de17957bec755964e35b43aff6b5682812bed84e31f55c6a9332e8"}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4040050) 07:18:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x200) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffffffff80000001, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc044560f, &(0x7f0000000100)={0x9, 0x3, 0x4, 0x100, {}, {0x7, 0x9, 0x1000, 0x8, 0x2, 0x7, "dfee490a"}, 0x4, 0x3, @planes=&(0x7f00000000c0)={0x48000000, 0x100, @fd=r2, 0x7ff}, 0x4}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r3 = syz_open_pts(r0, 0x0) tee(r3, r2, 0x8d5d, 0x4) dup3(r3, r0, 0x0) 07:18:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0xb875, 0x4) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x5) 07:18:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc074510c, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xa02, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={r2, 0x10000}, 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x401, 0x400000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x200800, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x24000014) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r5 = dup2(r4, r0) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x40, 0x40) ioctl$RTC_UIE_OFF(r5, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) 07:18:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0xb875, 0x4) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x5) 07:18:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc08c5102, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0xb875, 0x4) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x5) 07:18:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2}) dup2(r0, r1) 07:18:52 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc08c5114, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:52 executing program 1: semget$private(0x0, 0x3, 0x141) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty=0x1000000, 0x0, 0x0, 'lblcr\x00', 0x4}, 0x2c) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000140)) fstat(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001340)="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") fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='wlan1mime_type({\xb6em0\x00', 0x15, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000180)=0xfffffffffffffff5) clone(0x210000004000003, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000040)=0xbf) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 07:18:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) sendfile64(r1, r0, &(0x7f00000001c0)=0x56, 0x3) r3 = dup2(r0, r2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0x6140, 0x800, 0x5, 0x7ff, 0xaa67}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)=0xffffffffffffff81) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$RTC_UIE_OFF(r3, 0x7004) rt_sigpending(&(0x7f0000000200), 0x8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0xb875, 0x4) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x5) 07:18:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0xb875, 0x4) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x5) 07:18:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0cc5616, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:53 executing program 3: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x586e8b68, 0x400002) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0xb875, 0x4) r3 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x5) 07:18:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/ipv6_route\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x7, 0x3, 0x6, 0xfff, '\x00', 0x5}, 0x1, 0x200, 0x8, r2, 0x4, 0x6, 'syz1\x00', &(0x7f0000000080)=['hash\x00', '%\x00', '%\x00', 'net/ipv6_route\x00'], 0x18, [], [0x10001, 0x800, 0x3, 0x5]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x1c00, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r3, @in={{0x2, 0x4e24, @loopback}}}, 0x84) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile64(r4, r1, 0x0, 0x4db4) 07:18:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x761042, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000440)=0x9, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r2, 0xffffffff8004700b, 0x0) ioctl(r2, 0x3, &(0x7f0000000000)="1bd7d49bd671268f045f205a2d3605b21b6ff32c7dd065948934e26eeb80f80654346c1947a4fc3ebde487411556c69385b3c6cc6c742b0b257c0f921206f9cb0c574dd0b29a948186ecf405495e9a3b0b125a361b6d72225cb9b121639bb7813528570ae194809d7d9f13e58dd30f4ee318585ae2e49ced04e7f8539f431076d6a43d7f7d8a04e58d3ee9731c355754e58ce4143fe438d798aa4107f7a65bd93695af09ba14fb8a17ae1bfccb1dbdd77d22853553328650c47ab986f8bbd79450ff208ea4662c22a9b3a96f") close(r2) r3 = creat(&(0x7f0000000500)='./file0\x00', 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000480)=[0x7ff, 0x7, 0x5, 0x2, 0x7c2b], 0x5, 0x1ff, 0x1, 0x5, 0x6, 0x7, {0xfffffffffffffffe, 0x6, 0xb6a, 0x0, 0x7, 0xffff, 0x1, 0x5, 0x5, 0xd79c, 0x7ff, 0x1, 0x9, 0x200, "9dfcc1e1d102c246afbe2eef4180e59e0c0e75794165502b9a4ae923ed1fbf76"}}) setsockopt$inet_tcp_buf(r3, 0x6, 0x200d, &(0x7f0000000340)="fbb792f2f2f67e81169138ac69cc9b4c7e11eb492583164b8a860109c0a81c89eb703f9e09553a1317b1d48339a6202a4be62f83c367331862cf8c09dbd67bae3934495a120c68120673892a47c7c1ec3050684edd312951b26d5b71d462ae4ddce96c5a3fce08db24da0232e3669c6ed303ce770992bb5377fe42a422772889683bea9b883fdd324bb00742c80edaff2a072cf73f317ca79d", 0x99) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x3, 0x3, "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", 0x91, 0xfffffffffffff801, 0x3, 0x2, 0x8, 0x3, 0x6, 0x1}, r4}}, 0x120) 07:18:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0d05605, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}}) 07:18:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f0000000180)=@random={'osx.', '\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8, 0x185200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r4, 0x6}}, 0x18) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000000140)=0x2) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) r5 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r5, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) 07:18:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 07:18:53 executing program 1: semget$private(0x0, 0x3, 0x141) syz_open_dev$radio(0x0, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty=0x1000000, 0x0, 0x0, 'lblcr\x00', 0x4}, 0x2c) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000140)) fstat(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000001340)="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") fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='wlan1mime_type({\xb6em0\x00', 0x15, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000180)=0xfffffffffffffff5) clone(0x210000004000003, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000040)=0xbf) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 07:18:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x602000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x2e2d}, 0x1) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:18:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x5}, {0xffffffe0}}) 07:18:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r4, 0x2}}, 0x18) setsockopt$inet_dccp_int(r3, 0x21, 0x5, &(0x7f0000000480), 0x4) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000004c0)=""/253) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2c02, 0x0) getpeername$tipc(r5, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 07:18:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:53 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x9, 0x95, 0xfffffffffffffffb}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000400)={r1, 0x5, 0x7}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)=[&(0x7f00000003c0)='/dev/loop-control\x00', &(0x7f0000000440)=',[\x00', &(0x7f0000000480)='+\x00', &(0x7f00000004c0)='/dev/loop-control\x00'], &(0x7f0000000c80)=[&(0x7f0000000540)='net/ip6_mr_cache\x00', 0x0, &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x0, &(0x7f0000000bc0)='cpuset.memory_spread_page\x00', &(0x7f0000000c00)='{\x00', 0x0], 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x2, {0xa, 0x4e23, 0x5, @local, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) restart_syscall() inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000580)={0xb6a}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') 07:18:53 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x8}, {0xffffffe0}}) 07:18:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x684000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x200, {0x1, 0x0, 0x2}, 0x0, r2, r3, 0xffffffffffffff92, 0xffffffff, 0x6, 0x1, 0x20, 0x8, 0x4, 0x0, 0xffffffffffffff01, 0x39, 0x5, 0x2aff, 0xefd, 0x2cc00000000000, 0x9}}, 0xa0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getuid() ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x34]}) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="cf017dffd6020000f600000000010000a802000001000000000000000004020005656e86738800b710bdc05ecb6a7ead040000000000000042e400ad778b97"], 0x3f) r5 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x7fff, 0xc0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x5) write$P9_RRENAME(r5, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) 07:18:54 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x48040, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 07:18:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff80}, {0xffffffe0}}) 07:18:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x100000001, 0x40, 0xffff, 0x5, 0x401}) rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000a71ff8), 0x8, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 291.314565][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:18:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x420000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000880)={0x2, 0x1ff, 0x4, 0x1, 0x0, 0x3, 0x4, 0xb2}, 0x0) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 07:18:54 executing program 0: r0 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="d450b938c3b759477871d23e3863d4742635555187c2c6e93bcfd160d352dcc6ce89899053064cafe5d857ab5b4ee2168d374d267e5a710cab465e2e4ff26a5d3f42324f4e9b32de4063806bfea348312cc64937c2527dc3465a5a0b8025270dfe2cbd677c7fa7a5c1d7b763f15a858acfd3d172155b9e7d333c03a2b5fc4844bfb0f58223c1d0225dd00e2cea881767658de3ed7e6cf87b2f527982811c7a5edca2fc3862d2b48a80f6db74b2e347ac4fd2b2c0bb", 0xb5, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000500)="585ccbe4ed83b836c1a6474914dc55e72206297b6881000000000000009169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, r0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x88) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) mknod(&(0x7f0000000400)='./file0\x00', 0x2, 0x1ff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f00000001c0)={'wp384-generic\x00'}}) 07:18:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$void(r0, 0xc0045878) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000180)='/dev/ppp\x00', 0x9) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x30000000}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff81}, {0xffffffe0}}) 07:18:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x3fffe, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = fsmount(r1, 0x0, 0x4) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r3 = msgget(0x1, 0x101) msgsnd(r3, &(0x7f0000000880)={0x3, "64cc99dd1d00c8b0334d3351a87333012681ce5833126d2695fce61864fef40ac30e759201ceae58286f62e229abac8745aeaa8bd7b2b346744668f94dc29f873947f98d8648f39fc0a53475afeea1d7d72ea7a8bdd5c7a363de5f309a00caee3f803abaecfa8959cb45f489d625095f7af5864157c2fbaaf1ba408452e419cab7fc4c16beeae4cfb8d24edd8ca5830888bdc47501af31d89244eeeaa49aa265476f1a1c2ff1d06d1a53f6abac9ddb1f9cc5295e5777afc64b09b46df793325c1c908fa37f38a7c59a0530f4605bcb14f5b4ba074d6f2666ce532d55796e488093bd56cea272bd6dfef88fd57fa9fe1a8fbf448bb8e6c962fb01f81c6b3b79b8f75a3ea806c2e2edad7e63633d1ffb1e7287ab23985b8ae9e854e2bd07537cdd721bfb28a8dce6719bfa6a8f40428b00b8090b977470edb3bd97f6d56a2a63bd44060c76f6555f7a72ac36fc56d8c9e16b63f570191d6609eb5d225d4cf89fc61c39770621b1385576271838947236b4b3221733688cb50a64843787cef66d62f2815afa4032182d3786932a0454b5f12bd3b47d1db70dfdf96144ed834bd4e7b3e32498fc3b1bf81fa33f8531bdde3640f08ae7b8a036403dc56577041e2664fa4665b52e7ea64ad7d553d8865769b55f604030ccbc208ae90dc1b8d212636affc410edebc0f3a069b3498f850f2793dfc173ee5caa717598fb98085deae7a4f8b791fb9e57023a7b985f746347318743fb7aa60224d7a1f0280f12d3173d090fbe7454a74b76de1278ccc9a334910bfed9da7cd0a590f6a7c6485da906648555f76bdf2dcba05f38c00726491b704562f6978a86ecb25e6fe7429128d46c2ead05401270e1cd99561eafcbd180fac648eb91ab198fd7ce525d3f7d37887dfac328b5190116e5de7ac66661337b7db3109c0d31acf4788c739f80e0eda4dbef3924613ac51156cea22dd7f3db2523ab155a8ce16ec3df7fd67ed4d985fbab1db77aab76e241f90186324f3c9c0d7ea0598088bd772a299805185aa6bca02121b2ab77ff1ab18cd95c38eb4e5d551aeb28c43a119c1d9986e5579eee2928746e03fadda2df2d188cc98ea644a5390a846a2216e9724d1e4e443006560796a44d17d39ff9dfaae972a6201c706d9e2c33bdcac5c2c3ceb1443140cd4638ebb424c854a77dee8d128fef369cc806a721f344998324c6f72d9b6130dd7362c2d4679fa09e9e4d69da60ddd34b7fb024f2deb55928d86efbcbb6ee39dcb71f4d5d6de143143a88ff0072c8bcec80bfc2883503cec02989efcaa275709cd18b9638c2b91c1303870c6eeb38a99cd6b8b68647532f957a582b1a412bc58b23ec7bec3fe48d61ae93a71955a7efb6684bbcaf5f3fceae1303974c5d86beba1d320a6f7022b47bc9ef8f57601e98425ffa72914df4662894b627ae863ba1256f9a323ccecf4c5d374cb815b82a24ddcfab075fb45f8ee29542166e55512e05aa63cc9d05cbd0d744681997f52398088dad714b03ae57036bb60034d37f68d8ef83d0092bf8cdb7b183b66e1bf87bcf52565f7f93e53c4303286003ab8a883efab3ee4c1aabd694217cc832a934c0a440bb934a17621a47a0c2250aca89ede51e97ed2d019d2aadcf23e4d9de2ebb037febb0595b46bcc0e4df18f6a739111a96862447de2d6faeeef5294e02637c97e5edfcdc9bb850a799f0396aded27b3ac5aa24e4334c9342055c25c57160db905ca3e741342b75397b3e6b756bb2e76ceef1c8b67388f4e7b02ae875c624ec1fed98b0bd800d2fe527bd671bcb009e782f03d662cb7256a1eea60df550b312940195bddd52285c2eccfb2b38ec36fefd62cb5625162f0b05c4d73c18f488a06ba2b8e16df685538d4f6f91b19c0d7d3fc52dcf93fdaf25561d1c42d9900b6bb636449ebc31f032de54ce1c3d54739669f87acacd828dc2df233140eccc3931cce433bd73b63cc1bf076f9a1676d93a17acd660e161ea0213274aac97b0eba65d52bcc321eacb63ec719ed5280b1efb023b6ba0d522b0ed39af72f1a7e5ded5da213da8178c77b19374e622c5b03241f0f9a8c1637c3c56eff502cb9a47b21dfbebea9d039a8c746cb00128dcb4ab3c92afaa005422783fafc17a3edd3e289f672cb07afeba41481e71a0f48beb37c0beab83d172779d20336c332c5354749c7531e6891db5fa07d0f919c14f21153e35817c81fdc1e0890bc1731481e0dbed67491f7bb665e4de1e085c249a9eb242be9eac28518fab001c7cdec7f1cf344fdd3938bf1c8764d8ba0d45cbc8143231da5068816c8c7e4d692b0de4d4677850661500d97e2d107058223a9f963efa3fdb30b0d0c23e8614062720068f3a0fe2c7c51e22648fb9ee6dc9277f7f1718c495e023c6ef19b8831470280cf12186ee4e589aea33ba5ef4f1610f759d326d1dcf8d1089c2c2620cd20f3d18ccf971d781ab8cf2d8c69684f7b11a0c962335973c92d9179ea0c43a449094db060a70aebc7e60035c9ade38238ed971e617504235ee50f7582c29ef37139beff6ef68cea6aba75f6d2ac844b924a69e0a25cfaf622056cbbd69493d0d2d1edf33b0fda69bd868beb628371904492de87f33c748db5812d6ee3e5acc8e49f1d1eabe8bd22f574e6aa85fbe9128dae4fa92f16ead7fe0109b8a8edd05c6601b3b1b7c26c7336f0e46d394e9ad19655745d00b6576b3316c25efae381634305e52941ede66e294111ec74892136375b8d1a39cb84ea7f594b11f13b5100c8a0c00108b82cffbd97ee0f8df4c97d7e38c656064b7f0e6c923686dc17d3d1723a2fc41d6633a01024b8340fe84211442a9548fa5348984580b6d54c3c8a9ab425db2bd81c992eaf955fa026a03b1abe265bde6250673e9271e35250c8818e795808157c4ec2a6473976883d0ddbc641d36609f293058c74e6d0bdcaa81b73abcef41e6bc43cb9b4cbd59654addb5ed0e55fb94deed8f5646d8bde02f68e6da7f880a27a8d32f748bd310903087783e2e3e7dbd217e4a7db329c1e1457ff2fd5c06374e078ee4df656a2d508596aefee0216a5c31bb5b48aff10c07b41ef56f8c79d826acf8ccc0d2ac228ad48c571e9054f8f146609d048ebc63ad7249ae90413ca9a1d8ec9588dfb4b13983ec6f1e5156d41542bd5d20645beb6c762cb6c2e4c761ccd9b41e05e6a2a2957e31d66051c3383b3c163f6ab2d30dc1c6128a483448398e9e87fc4ea27a6ffd0db13672d3c1ddc9d6465f730dbf4514baed1821d4ef56de6d1455cb841252f084007a79f70b1eb3c5e1bcb774fc592be6ddb0cca136025a1100b204544146d2722e786855c985641b547f5d74635cfa2a85224582e95c05048ca90eb6493557bf678c75b4f16e2177eb081ec5832c3db920be8cd91d346c25f024f5251396eca98a3916a4fb115d1eb7f005353127969ac2a4dc1dc0541a5ad85634b16ea8353ecd233e9c75f90cedf4d425d2a89b60e4a11ba010623fb67c1990f453f965c26b037289743ccf9b10856b76987b3e401788b3cf398c72503c09f0cc2eaa2f7f5523461b192a986c324f6750710c9250ce946606bea4575619a2f8d37cd09a5653da76000006ecd547ec2ff1e3549983b21ebdc17ed3d1684ca54139f2edb7246051c5fcad394fbb965efa1eefec7f136dc2189d1bf44cf41600e2bf02f73c58af07f1f276f5c5a88e9a840a0fc195099b1bdabac60786072eae3e78b26f66c7fedb3104ab3fd0820c7776d02cec6f41e0d74f22f63648320ea14f7cb52d07fc1a7684dcc23abd5d9d7db7736331ef406d60c5f505e5e1cea1e9523cc28f9672744fb0b23218543307e92e9d0d6e4ed79d25a8a3c7a69da1df1d695ff9e338cbe75ddf4ade8d1f6135c696441d14dbab425e01ce90ac8ad629f464d1e1c5cbc4d7c68793f1a3e9a30c9751a0be3bb2e39e4a92d394f1504464fe0f3afc949667dc25b3f65ab7959eb6b6a78790e07d0d9f026ab73caaa7c4c2dd750fa5958e1d70213c0f1853e91326a9c6a594dd5a2e511614aac40f06296fb464e1c19182fd4544226a60542f880b566b959210b9036b3a4f263aaf8464308be927847fbfa3bbd28ead7ca3d15c4d8e214c38f88321b517fd05f3021e3e966143fae27edcf3425a51462d14e90e13ca59c3780f58eddaca422513c594ce5e4f810bb5a903616fe6c91abe8b4afd222047c7a01f8ac1f79695329c8e1e58bfb1f8e5e642c60e3e299b5d9435c8148ce83c2ee32520f2eba6e9b96813fa44515abcbc58b30084357b74a6caa109a98d1af99a02085c66867ba2a45346be437c62cc030e6670f0b1c2892f498dfe3e393924e2e298f47a08f7c6c3599a6e12b747abfa80f5a2e911128cdff40b45b74a2d530d8ae4d5a6a623f1759c8aa4251c1676f450c35db05297312dd55c7b3879d604d6ed54e15092ab4ae10eb7aa492b0329e7652d670ddde13a502c2685cb515f7ccd7c1e0271c279940d814d0c1e028fc7143af01ce3727a13aa3e43bdb49c917f32e762924ab55af76d3a7909000ef68a5bbbb56708f4cbbcb91bd86e2369e25a91cd4bb39e7d49a18f22459279ac6199fa3607e6889c289a41716d112ad0358124d15684a6e58d4b9293dd67d7b6db64f25beb223a686f83acf3257198c208cd1fed47f46ee5fa717a8cac6faa93df56bc2a997bd0b5372dd4bca779c62daaffd9715d3d0e16596550d5e62fdd5ca2991ec51b63dbd7e842a55178fba4d84e8bc80f5ba1e44713e01c8b7ee26facafff34d356a8ac6c2db7e219852eb0bd6eb6353002a7fbfbe56bc61f25a1e0378910016a84bbbe7545a2a598a3556100d28bbac7e33b070f489977fbd4eb47a8c66e21620a3b7392fe88ac606a6132c8c8355bf1951e6dfa8725d7ba446c2c69007340c36960d78ed8c458c169021456798b1c6c74b9d24244f1f7689f3c9eae520ade108dee6e710bf61d33f3a2e007ceaed2f2ba289ba0992e8e438faba88c133064a3ad4ac60137d478a77dec7ba20f9edd01b4d8fc05aa95967288f4cfe8441483c9f1a96454ae153005d7a992cbdaa7f7dcb45a73664b69ca63db003877258fe61b386b7c38b2b7fa859efbbbc598d07c43e60d4f82c1a1aab84bbd4cfe950ae37c0fe0d660bcb9abbd95286f89a549013d2fbc2f270ed10b28d7c9aa138971c49ba1f358be8514b4541d64da195b6bf39a5effc4b63c09fb3f07b60da8abcc0bb06acd4c199c288d83418c3574fcd4f90538b0e19683732436058f7d493ebd851f4f4570052cb4fa34357de6036ed66194a5baf283d8b9d3106bb22d188061f14ad38196b47c951e1eed6b8efd2b2086fd13feb0e70518776b4012a56fcfe2e8c20e9e9b16b3446cd1004447390c4617c635f7ff21f9a40ef2b07dfb712c6b599369bccdc8c163b06ee0ac5eb242d5e2ce7c9027adf53e3775985056f365d4ddfec23df79b018cdb387506d06ef84a613da0df510983444ad8ed76b1972a8a2b67662075be056e94d02ae47f55ccb5f82b717dc5d1d23646572d40bc4fe062739ab9ff726655e38eb3a19df7541362e322d9af09b123d6ea9a83fac07cb27a300ffd3ad7acf8e15a743aab8f5b3473db67514f1560fab8b40c65b138e47331a74faee51c0e4e668caa64b54cecff74ed87c64b415570f3d320d515b46f147041e550633037257e527765ccb2ffa33a29d585da91df4df491f3093413546c4d8291388691af70b179e2cc73da6da42bd47ee07c98223c8bfeb13e2dae48ad4c0a81270d85d8e5516577f4c5d475fd48d7ce4c3bfe12"}, 0x1004, 0x800) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x401) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 07:18:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x10200) ioctl$VIDIOC_S_FBUF(r2, 0x402c560b, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000100)="f6f186096fb0d0a05563f12b2160dded6d8b59cff3611f3ed977c6701776d6646c82521195217ed6e7cb2f3eb77eddbe87018cad2061df5ac31bd1bdd96149731ecf06a5486bebb83f933f4de51abdad9512f1cdfaae29a9a7bb78a1df5ab1edb6bbdb7a4bf08d0bda1ca16c03b986ab2233cb9f036640cd2c72ab9d1ec65eb097ec0520fdfe5a25f7206d2257eef1f252576b587d3182441ceb2db831460a17f14752100cee79e28923b376aeaa3da6b2fc2a60a8eabd619c49649a3c462412abcfb1ca8a71379a58a0ea95602297dcd3849b87bb867ddbece63ce22333626dcbdee092349cd18c5c34d4b91c440a1ae1daae8f3bc15cad40aedc93398041c64e0d8b0c9d9cf2427824d0697ad567b1d2ef22b2eec7f8e4f865ab2601b583419f53363c538d6638c005bc96a4e82df38b3e1af8d8b67f1115dc597cbaba5a2bdcd33196557032d10ce825ffe8401892c6febf04b18fd19518fa4ea16fd34a0ea176269a0014b50036a8f217f977d68cf9e29818592cda8f2bd7af8593978b02a700b09ac91b6769a9512eea00e93e5cd6f7a70d6beb3a12e350db335df2a54d6e62d8e1dfae5b120692b8ed3c3db4390b315ef965caa9fb883e937909644def5bc0c7e437a97be38f287ce2d269c7c58d46cba664074ccf1c0ab83a7dfd3adb307b2d49d058823ebcbee8ff29d3f1905d0c5fc53141aa47069d9924e5b78ef33ecefa6d05d59cb9e18981d4da1901bfc5ab3c8a70d5464650241898c188a00f2880a7754c6317704dd7ba677fddc50faa34462dec69c110a43e37651780ecd5566b72998c771c2dc3a1e8e27f4f8cc1190bb9b9290b43e9976f1e51a1f5a00e834d082eb4823026f80a2570014dc1b89afb461afb20528f77fd18098ecfdb420e4cf42e39d702c15a5b1666047156120333aed0fca8752a857a0f084b4a5d5d2bdc9cf07857a37aa6239dc14d1b9f3b5f602fd290095702ce7e349747ee2a6bf5e7aca9e9f3d6831829ab963390106f22265fcb4a7876a8563bc59ba9301a5eb29266c9a4bf2d43ef8a2d10286eef8d329bd4aa7b529c9f29e9761a4633eae2d7af1d6bb4aa24336aba1348ce225e41f0692fa357c33739024623be1afe2cad8e7676c6fba86f9fe73bba78bb58657393c40763fbc93e04568abadd9ae24a91ed8bc77ac9bef61d4478f754aa219acdaf04fbad5be9245ddba0342162c115dbcea41757551b4ebc0d68d9992709a673fea6fff6f6ad66288ca4302725858f610cd0379aa7615812953493bdf2bbc367802944cde4b8e8189eb3d8d0215e9c32e634ca03412e7a8112aa7af84964dc245ceae04e804aecbc75f5c40d94982a41b286fa30e745098eabc0962e0e1d7a234d8dff05d6c382015bc7af3e2ebf92b870d3c028e6b1e11ffa8525c585e78cf0565a9fd2b5dfd21094cbbd8b02cdbb5eef0b7db358d665a231e1d7b357fa6df51436a883365da6ac72fd341dac1c11b902b84d664cd3a7c6617f28f627e1c3b9f35a1cdbce48778ca9a0753875f63396eec10dd8bb7e07fbc23f8ae3b18b73a89e4c51f8bc7405fdbbde9ddc0c3915d99caa720182f8a206e75d750e3b6480da870b2f872c9c629ee025009a21c718cff3a51b4c5a0e1db400460baf04eb943a9652fd23046972fc50cd9aab3edf911ad3f2c3d14401e6acb98696571fae1fb53e9fedf40e841811f131fc1bedea726071641995d0b070e5c79a65c65b5651c43cf9a1f6503ad5808bc3ca24feea5f896f42bb39dcd885dd5d722eb3b085d195eb1fa4bdd15cdb679a098e710fe245b7cdf34a182959597933318c0ba7a2091bbf1fde0dbdb0d9332166791ea1816562dcc0df92760ce1bed61e9467aebc8c34df618397dfc37bfd01261ad2264240754c5a24c19afc8b6616d7b09da665836532c26b892a581d31e53859d0179b6e4b57bbb805a3e1a86fb7cf266bff6a7a0642cb4dc9c4b931a54d0b1b900c68120f50fdd22b309c3b49d99b9ebbf2873bac93fb0817169913733eba24a6914f7d82c55dcdc7e1fa87b774482244cdd9ac411fcea01fba695fc24deda8f818358aee5a55f6430f5d40257acaca2324935d7006715b104237d9fd89f7c28a4beab85d9474934958a84c6ab51f81bde0c252e0b3b410a0f2c5f02391354250124cb8b7cab622e5ec4bddee111401d7d5ec06a2a2ae41cb621616cf6ef73f21a4d1e4bba2b94fc553c63e84f4b795883c1ba4b3efdcc5b556f90e3d86855dc3264174fc08a08a6a49c1e3758327ec9fb9b23396d0ec2cd9a06d0c1f32d362b36b62c47371af76c46090fb4f13bcebb0ca84918281003eee634a8d1b6debedd38711237dbe8f32999d6b80932576014371d021056a6dd9a173a728e5e94fd414b1251d2a6da1d3c4951d94d5b2c89dd53104f71bce16568a3ce7f7429612252e7de3b249eb91cf23175d704620c2fce45d991012fa89dd23e072fb214b7a65eceb3d63501622bdb51e60ecd94395a6c776df244eb0929897b2caa59d374fcbbf9c71dc25d3778654a1d871aaaa278c62fe3202f657b8aa3169045dcf1f0d30eec1484c7806bc43127bd3fbdd6ad3bd9a78f59520b443b0a0ff2847c948bedb93729ca514f5ab15a28edbd76bafb4390d48f8d6601cac5d5cc625287d7f1199fc82ff6a00891a045533fae63f51bfdf0955747e839350bd337539c31cb58cdb8d312fe76e436092b5fb4509633902539c8f144503df4127115d186981b940482786b2466d5f8e2e739dff0d3ebc9aec7a7a358b4fecd92afe1db24f7a0e0b99b571a04f4fd7871cf96be457af12bc7d2499f8e9f515385b93dd4903bd513b52094c6fa86110cdb40dbf1bbbd5bdea36587326e9f64b1f3ad34e32d32b93683b3816f361e9ab7d5a7a9239821ae65994989849b2fbf3739640be019bbf985320a59789215c4c4efcba8eaa2ad79ae93155821eb952e961cc864a54d085d42c5e088530532a95488c08494c93fce9c97cbc55c47c58c9064b07687fff68a1f2054b5900b0a1163e914aa8a313399280e86fe889a10daecbe6676b49c9553791e083da3930203de31610fab3beb7d34a1517a8d6e2d74a0916e8af09838fe996c579dd04114ea369ab71d2408eeca8a6e002d9b94916598b68cee1a91e40121f4d58dd3ea9fdff639e8a8e18016237fabc63390222d15016768043f9ffc49b008f0535bd75a78547d1f8ff5ddc2933527fc4d96e7512cee96e28b5e801a52491fee87d915057971ee3cff1e30886f4313d6d3d0e0e30ff020796618a7b182c0b88117b4b929d8cc297ad9e2e47bb8194387d3ea89b1be62a71dc2c8acb7652ffd61c92e56ecf75a717ebe6362e141b7bf3d4e8a97e03bd2de03ed3eeeacb4cb489182d32e950cf4f5bede0da29aa8f2e55037e5cf70759c16ffb4e05733247c26faab73401a8c9f2de613b67263328f52c5978705ae563ee831639417d0676afde87b34debd88260aca4c48675324422a30d72b4642dfa01c67296fbbe0dfd41a2620144bad3315ee19bc9c8e970fff229a3cd5bc23c4dbc9713c45234b7ef1288ed9321706631e2cc71c54d5d39c7ee9c1f197bc055e9ac592f1068de96697b7905771fdcd4a1fc5d0b27c327be40110c781e09e03d30c21c0182405d16928de6ae0d8d5de6b81cfc737ab8398ed5aa30210a6540a7d5e75674f6a2ec98f7d49d84ede709ace89a3830f7e860896089574a437cdcbaeeaf7b651dba61c17c57b409c74a922a8117a872785508d125e04c2161df2eddc3659019ee7b99c1feafd3ed8d9fb84355567bfda579dd0d1c7818f2c97087eb09967928b60cecfb5f86feb189cb9bf02ef0f6cc63cc3e66d0f26b334c30a6b4decd681423c4ee1625496dfd0e22557b6b8c4b6e16a934508ee6b18beca351699e17c64ce5921d2102e07504ddfd7bff1f63cc91c7820a0802042930c476f8bb7047cb7b7b48dc46cf8c6879232ac963bf951d2c6f9e54873c497d53bfc03536600acb3eb546033add8e69e9b7c707dfa1cf4cab1984a394114ef020b1305eadfc2e9c406c7a7dd48e64af66de800dc5efa7e055d1d3cb1feb769876f362fad79557c3ed19f98e841a5e71d5db93d373d8d27e6c49254055f3bac4f118d67b922d89ae09fcf46e34ddadf2c86cf37dbba05b132f4835371a56362d129529bb9e6dc632a88871ef2f0cf395aad73840fc9221815f5fe4200777535ae65b08cf581e0e2fcabb4d978b1b590b99663680750439ba48ef4d6f7e447a4dec59052aaf3dda879a7489dc7c13fd9068c0ee4b1a5c7d7902b40cc645162f39ee7538e3dfeda37905d3448880b8e08cdd7eaf4e7a1b1cec9002f07b2168739ada2d8858c4658508b4272dac52c9dfac7f977993669541a694079fb7032c063236457903549b38e211fd4e3c93a7993b844121979090c89f628dc9b344c22a84c9e19fd5f77248d6f0beb069359b647c1096cf379cd4f363eab040b7cf9627d78fdfbbd10435f5d301ada63cd2e2d969d27f75bc33ae29fc29c2368243de0dcffd2eac9b53a3f7cf0ad134ce2eeff3bb1bf99ed5a339a6f72a91e8fb4fb9643dd827b3f22fac0e869f1ac1a69d5e2b5d2231ee335070c680a720c31fbd6c687b6c79941444db9453a9c4880f6d2e1867da8b12498005b8d82d135296f9f52bef59d947d955b0d5a52f0ea00726cc14e0c3ba102911d0e470dcd212ab59732414d90d25642d4783310f55f107a16ad670a8fc8304c350b0f41e5e5c7e3a387a6a9922e9e3327e5c8e8b2724c0b9e3a10b0f34c17923b868caa99307573e98d1ca00fa39dd07d75c441aab690f83d12aa4a8f4ab03948d9075468f1237a67f19b83bd0cc0697a69f311831b37a945d00108f57e69b72d382a0ed86513b4e21d3fa1a02dd23b8614b6968a3400a11a88e74ae7d3b728afa834da1dd9d54b9a5886aae7df4766bfbfc9310231f6d15ae2a3a186cfa27ca012b7acfc55a169958231d75f8ac8060d91ed07d9b8ef8fc6a5e31e760f64fb49feec39cdefba365a45b2afd0346b0b6463861609f0282a3ec8ad6c79119446c76323505132fa87f7926fb3ccc8969471fffaf2b2a6a9ec6b27fbe7a108e9a686702cc205dc46f4c1cb7c2caae2732419ed84b69a73ad89238c8e32a876d043faff75e4297ed6ad7e81d90804817a067c7326e9eee1c88101e25ae49af49b4f824c3ec460b268a78f66b05d1304c6f681a95449c743c6401852c984fb564329bd94c3438b8e8b7a69b8f3756085b3a37aab6939d3cc2e4e2e75d583b3c996eb48101adf6325784cd3b2c58554e5333e4d3d1740b5147d3f01e2198017eb4904a5e5ee74350daee033c86ba19d43dff5dc0d52c2876012df973c2f59cebb4e02f89d54793b31dd2d70a3a5b5f94fb49f2ab6ef895d1ad2992585f76249bd9eaea5d3e62f2489a523b082962fd7b8349f07afcd14fc6bacd07aad6492c2affdad90ea0a6cfef49270a2f2deb370e24d275fcbbab90a86c329d6483924ddcf7a738fa77065ebb3e33cdbd2822bd7261c2b51455266de39f1336ebc9e14a907129714b370f41b09975fc3532ffbc6e1477fc7c55d3423812c8f54e671401543510bf190eb3a2f9f2779c7bf0c5bb399896b1f768d75b5d79a19a48a79f6c17817ef3a0745f27a493007cb3b25d52751aa14510c51b586041da55f8dfd54c0151e8c0744818041e89ed5209d65d68cd844c36ea8f7718f7cb6f4c044d1511ff6fafd2e060c3b279b24f4ecd6dddf87a0e6d417af23eebd3be2e7a667ee9d99b078644", {0x0, 0xaf8, 0x42475251, 0x7, 0x8, 0x3, 0xb, 0xd9c4}}) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000001140)='vmnet0ppp0user{[^$eth0\x00\x1e\x8c]\xe6\x05\xad\xd3\xfa\xb9Ip\xfac:\xabO`({\xf3\xac\x0fJ\t|\xdf\xfeIv0\x06\xa7^\xe4\xac\x112\xc2(\x87w\xae\x98dw[\xdd\xd1\x84\xafe_\x1aM)=\xd8F\xa8U\xaaoI\xc7P\x8a\xb8\xd8\'\xe8\x84\xb8\xe9F%\x0e\x13NC-\xa4\x1e\xa1b\xfb\f\x9b)\x12\xc5\t\xfd\f&~\xea\xba\xd0\xc1\xfd\xb1\x06\x99p\xba\x02U\xb8\xe5\x8c@\x82\x8ar~\xa2&\x13\xcd\x00 %\x82\x1f\xc8/\x00\xaeq\v\xdb;\xa3\x1dl:\xa7Z\x88s\xfd\xffu]\x957\xab%\xa9\x19\x91\xe8\xc2\xeeB\'\xe9pBW\x8bj\xa7\xbe\xd47,\xce\xebY\x16\xe9\x04a\x1d\x06\x16\x85\xf0\xb2\xc4\x8d\xa9\xa9]\xa2D\xce4\xa0_\x00\xb9\xed\x86 [\x15\f\xf7\x00\x0e!H\x1eC\x98\xd7\xd6\xc6\xe8 d7\xf6\xb9\xdb\xe9\x89@r\xd1_0\xc0P\xaaGwP\x85\xe0\\U)8\xb6\xde*6p\xb4\x1co~x\v,\xd2N @\xb3x\xeaI\xbb\xc9c\xa6\x130\xac\xae\xd4\xc8\xe9\x17\xcaR\x84\xd3Y\x90Uf*\xbb4\x1c\x7fy\x9a\xaa\xda\x1f\x9d9E\xc3h?_\x0e\xb9\xd0\xbfq%\x9e\xc32\x99\x10\x9fB\xd8\x88\xeb\xf2\xec\x9b\xcf\xc3\x00'/350, 0x15e) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x207e3000}, 0x200002}) 07:18:54 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000040)=0x10001) unshare(0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x4]}, 0x45c) poll(&(0x7f0000000040), 0x200000000000006d, 0x0) 07:18:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000200)=@req={0x20, &(0x7f00000001c0)={'yam0\x00', @ifru_addrs=@can={0x1d, r3}}}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r1, r0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$RTC_UIE_OFF(r4, 0x7004) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r4, 0x7004) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000140)=@buf={0x72, &(0x7f0000000280)="228f14826e34716ecb86038930bf5db8fa5a5b637cf854bb151e4e057a3678ec2c31c1281ff783ddaee8a5b3f9a6271309aedc158949f82d9cf4dfb251f9e7160582ab46919f202f07048333314b84bc0280e6e1158f9e96fbc74c640fb629e126a08c26067eecdf48eabac0e04bc732b96c"}) fcntl$getownex(r5, 0x10, &(0x7f0000000240)) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:18:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xc9f, 0x24840) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000340)={0x6, 0x0, [{0x3, 0x6, 0x0, 0x0, @sint={0x5, 0x6}}, {0x6, 0x3, 0x0, 0x0, @sint={0xae}}, {0x100000000, 0x3, 0x0, 0x0, @sint={0x8001, 0x32173dd6}}, {0x6, 0x4, 0x0, 0x0, @adapter={0x101, 0x496, 0x1f, 0x7, 0x1}}, {0xaf4, 0x3, 0x0, 0x0, @adapter={0x2000000, 0x2, 0xffffffff, 0x1, 0x57cc}}, {0xfffffffffffffffe, 0x3, 0x0, 0x0, @adapter={0x1, 0xffffffff, 0x8, 0x4, 0x9}}]}) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 07:18:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff93}, {0xffffffe0}}) 07:18:54 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000e80)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52ed77b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) socket$bt_cmtp(0x1f, 0x3, 0x5) ustat(0x0, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x400, 0x2, 0x0, 0x5, 0x10001}, &(0x7f0000000140)=0x98) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x100) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r1, 0x7fffffff}, 0x8) ioctl(r2, 0x85, &(0x7f00000004c0)="77d27f3ea90f296553bb411a1d152294e77e7149bc192b294a23c35181c5d636bf342f24311c1f0ee1af3b19905e91b961d12a21dd55d6ef93ab4fe2f07ba8d9d7babb3a7c86d0431efa6e6dd2074c1c7eb23dbde827068afad536c27591d53761d0af2b579e2ab62423068788da2cecee9b45c0da442c909af59c0e2be784050ac0c922ac0e994c1dfb7afd83c8b31e78d46d57b2716ad4d60165ecc8684aab59bb6f84480d6745371efbde5f6b00b3f649ff47d6ebe477962337920bc206e272c38ab1dc76da5e4460690efa820760fca289f0241b41a11027") ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x81) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 07:18:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/\xa3\xd1<\xc2\x86/shz1\x00]\xdb \xf3\x04\x00K\x91`\xb7\xcf\xc8\xbbA\xf0\xa4\bj\xfb\x00\x00\x00\xb1\xc3\xae\x9a2\x82\x8d\x9c\x8e\x93\x81\"', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_slab\x00l\x16_GkqYi\x92\x96!\xc2Avs\xe7', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x240, 0x0) bind(r2, &(0x7f0000000040)=@llc={0x1a, 0x303, 0x9, 0x3ff, 0xf5ba, 0x0, @broadcast}, 0x80) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 07:18:55 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x40, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x8000000007, 0xfffffffffffffe32) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180), 0x0, 0x8b9a, 0xfffffffffffffff8, 0x2, 0xd56, 0x7}, 0x11c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000000c0)) 07:18:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {0xffffffe0}}) 07:18:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000001, 0x4000) timerfd_create(0x9, 0x800) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x4a, 0x0, 0x3, 0x4}}, 0x20) close(r0) 07:18:55 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@rose, @bcast, @bcast, @netrom, @rose, @netrom, @rose, @null]}, &(0x7f0000000040)=0x80, 0x80800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6010080a}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2400000008061f0e1cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:18:55 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x810) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x400000000000, 0x0) r4 = gettid() sched_setattr(r4, &(0x7f0000000080)={0x30, 0x6, 0x1, 0x2, 0x2, 0x35, 0xdce, 0x80}, 0x0) getpgid(0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f00000002c0)={0x1f000000000000, 0xff, "935b051bb2be965092afa7c1deae8a09c50a14b35afc9594", {0x10000, 0xb81}, 0x7}) sendmsg$netlink(r0, &(0x7f0000001040)={&(0x7f0000000400), 0xc, &(0x7f0000001000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xbc}, {&(0x7f0000000a80)={0x10, 0x18, 0x6, 0x70bd26}, 0x10}], 0x2, 0x0, 0x0, 0x24004000}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000003c0)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x100000000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r5, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x6492d5f72a9b1945, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) 07:18:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) dup2(r0, r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 292.533063][T15558] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:18:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xfffffffe}, {0xffffffe0}}) 07:18:55 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) execveat(r0, 0x0, &(0x7f0000000500)=[&(0x7f0000000340)='/dev/loop-control\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/loop-control\x00', 0x0, &(0x7f0000000440)=',[\x00', &(0x7f0000000480)='+\x00', 0x0], &(0x7f0000000c80)=[&(0x7f0000000540)='net/ip6_mr_cache\x00', &(0x7f0000000580)='keyring\x00', &(0x7f0000000ac0)='\xd2vboxnet1security#bdev\x00', &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_ports\x00', &(0x7f0000000b40)='/dev/loop-control\x00', &(0x7f0000000b80)='/dev/loop-control\x00', &(0x7f0000000bc0)='cpuset.memory_spread_page\x00', &(0x7f0000000c00)='{\x00', &(0x7f0000000c40)='net/ip6_mr_cache\x00'], 0x1000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x3f, 0x20000) r2 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) restart_syscall() socket$kcm(0x29, 0x2, 0x0) inotify_rm_watch(r0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) socket$kcm(0x29, 0x2, 0x0) ptrace$getregs(0xe, r3, 0x7ff, &(0x7f0000000240)=""/15) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) syz_open_dev$midi(0x0, 0x40, 0x40) write$binfmt_elf64(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/1253], 0x4ef) ioprio_set$uid(0x0, 0x0, 0xe3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x0, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 292.601718][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.668653][T15558] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 292.683774][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 07:18:56 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x2}, {0xffffffe0}}) 07:18:56 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x8) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x2, 0x1ff}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$midi(0x0, 0x0, 0x40) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 07:18:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = request_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='%[\x00', 0xffffffffffffffff) request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x05eph\x00', r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x6}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={r2, 0x24, "a560dd89175db421fe02e8331c7912a4c3b75836fe04eafecf34b09f24b871bc395d113b"}, &(0x7f0000000380)=0x2c) r3 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='}nodev', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r3, 0x5) [ 292.803423][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 292.809307][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:18:56 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x3}, {0xffffffe0}}) 07:18:56 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) write$P9_RRENAME(r0, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x250a80) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000080)=""/40) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0xb6, 0x6, [0x80, 0x5b5c, 0x35, 0x800, 0x1], 0x7fffffff}) ioctl$TCSETAW(r1, 0x5401, &(0x7f00000005c0)={0x0, 0x0, 0x2000000000000000}) 07:18:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101080, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2ee4, 0x24080) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x21, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x20}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="13000028d89c173eb4cd6d7e7d0912171e125c0d2d703974e305d33dbdeb2acd849978b2189f1f99d6a86995aeedd086dd9df945a0fb2284bab70ee94dbb80f6655c41bbc128db31aa0080264a59fc13077702c387d98b3db8093e24ae04d9dc9cb6515ac21e2d8e1ce30000beea3052dc6efd2bad886c9d84cc1265f9"], 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xc0030, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0xfffffffffffffcb8) restart_syscall() getresuid(0x0, 0x0, &(0x7f0000001240)) utimes(0x0, 0xfffffffffffffffe) sendmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000003600)}], 0x1}}], 0x1, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) socketpair(0x1b, 0x1, 0xa2f1, &(0x7f00000003c0)) [ 293.043403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 293.049238][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 293.055086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 293.060847][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:18:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) bind$tipc(r2, 0x0, 0x0) 07:18:56 executing program 5: r0 = getpid() r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/21, 0x15}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000080)={0x1, 0x80}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x3f) fcntl$setsig(r2, 0xa, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x8, 0x4, "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", 0x34, 0x6469b649, 0x5, 0xffffffffffff7fff, 0x6, 0x0, 0xff}, r5}}, 0x128) fcntl$setownex(r2, 0xf, &(0x7f0000000300)={0x0, r0}) recvmsg(r3, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = dup2(r2, r3) dup3(r6, r1, 0x0) tkill(r0, 0x15) 07:18:56 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x4}, {0xffffffe0}}) 07:18:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') 07:18:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x4, 0x9, 0x8ae}}, 0x28) r3 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:56 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x5}, {0xffffffe0}}) 07:18:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x2d0, 0x400000000000000, &(0x7f00008feff0)={&(0x7f0000000280)={0x2, 0x400000000000005, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0xffffff0b}]}, 0x48}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 07:18:57 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='&\x00') r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xbd, 0x400000) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r3 = dup(r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) set_robust_list(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e20, @multicast1}, 0xbb9cb7017635c2b4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x16f) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60) write$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x1ff) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r2, 0x1) 07:18:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x6}, {0xffffffe0}}) 07:18:57 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000280)) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @rand_addr="ef7b9ff525b19e56776d0ed67992bf38", 0xd52}, 0x1c) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x60, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8000000000}, &(0x7f0000000240)=0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000200)=0x6, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7f) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000180)=0x4) 07:18:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x18) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x248800) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x8) r2 = dup2(r0, r0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)={0x0, 0x800, 0x67f1, &(0x7f0000000000)=0x10000}) 07:18:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:57 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000700000000000019078ac0314bbac1414110305907800000000470000000000000000290000ba70ac2314aaac141400084000000000000000000000e00100000000000000007f00000000000000ffffffff00000000e000000100000000ac141400"/128], 0x0) [ 293.934277][T15647] sctp: [Deprecated]: syz-executor.5 (pid 15647) Use of int in maxseg socket option. [ 293.934277][T15647] Use struct sctp_assoc_value instead 07:18:57 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x290000) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101400, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x17) syz_open_dev$sg(0x0, 0x0, 0x86) 07:18:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000140), 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000002c0)=""/82) sendmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000180), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x2, 0x0, 0x0, 0x3}, 0x5, 0x3, 0x0, 0x0, "322831a11fc8b8c845d71031f66155cd42071bb83daf7016b5cf86ef27147b1e3b188c4d1a274d297286eba7ae032870971ba4d51aea044e923584e00046de89"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x804) 07:18:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x7}, {0xffffffe0}}) 07:18:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) 07:18:57 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0xe5d) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x107, @rand_addr="2f798c6d8efca89ff812dd86e58a57d7", 0x3}}, 0xfffffffffffffda9) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0x87) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 07:18:57 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10012cbd7000fddbdf250d00000008000400ff030000080005000002000008000600050000003c000100080005000200000008000200ff0000000c00070004000000280000000800050045ced50150cdc057040000000c000700380000000800000008000b0073697000"], 0x68}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4008000) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0xffffffffffff8001, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000140)=0x2) ioctl$EVIOCGKEYCODE(r2, 0x80284504, &(0x7f0000000040)=""/177) 07:18:57 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x10000000000001, 0x0) syz_execute_func(&(0x7f0000000700)="2e0fbedbd52b98cd801b69e429e4e4629b5c7cd9d9d0c40f381cd6385f5bf9fbe23d0bee660f3a60631753c7e4c753fbc464f2a5c4c1e95fe241c109092f0dcc2a5a00c4da7676c4c3fd01930000000004c18f18ee4aee0f000f00c4a7c4c229b64509074851510f64c2c4e3f91475af080f7991be30c88af0807700cb0f61f300d1c4e1d1ee870c0000005bc4e1d5dc4b00453626f8c4c1c9dd380fae0ba3a3247c5e5bf40f69e10000660f518506000000eb0d18c4f00fba6c7c67005ff6e7df64673667666066bd43430f8801c351c35189a6ce000014f2db9cc6feefffffe2bd45f35656930000") pipe2(&(0x7f0000000000), 0x84000) 07:18:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x8}, {0xffffffe0}}) 07:18:57 executing program 1: add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000480)="34e38b0012a162eb29382be1b70ef86a380ced403dddc2cedd3818640d829788be3180f889afa3b93afa10f499629066efafb1b14322f4109360c2e64959f229b7f5870d82d7812109efd3afeeb8113caef8cd1ecc09fd5f48ad7188d335083d9793570b698bf530b952d307312e5830fb29c0bc9bdcc465da2a159ca0f762feaa5bbc775483aeb21f9f470718e33cb25167de8a321825a92dffe77f7168bc3c139418b149ec578a8fc4a6d5ae10e5eab9d3fbe5b26e12c619439aa63b4ff35110be6907fd0cae4185ef0c64e091b0ddde6943677f41a99dd805b6f7ef48282e34ea831eaec87c4a", 0xe8, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x428000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000200)) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x4, 0x40003c) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r2}, &(0x7f00000002c0)=""/234, 0xea, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) 07:18:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0x1000, &(0x7f0000000280)="efa2ecc61b5b22ce54980fe370691ac73a1222e7185bf510e4d1ea6b24ffe7536d451a9de5f4a075a839327220c8555645f158e07ccc37f0d8972b3867dc97ac6139fc3315749f321e73f9554f24035c4e77264a7c06975ebbd8e4eaf03294b8168a1e57c4fafd125b306b06e96507b017de944e63a77035d9d462db4e60a38242feba27dd18a93f5dd5139e7dc412cda8996c212f3ba4d80418009bf28b3471c681433426af3ca8cdfe763f6e1dd34b95c4bb90d4ea062af7d0e841c3bde2946acaccd091c88e1a10664556e0dfa79ad0e452e94e34e18f5cbfa6d62e22b6bd5595e0bc7d080178a82cb7dd") time(&(0x7f0000000140)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 294.367624][ T26] audit: type=1326 audit(1558250337.538:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15686 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f00849 code=0x0 07:18:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0xc, 0x0, 0x0) 07:18:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x300}, {0xffffffe0}}) 07:18:57 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x40000000000020f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = io_uring_setup(0x6ac, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1, 0x358}) ioctl$VT_WAITACTIVE(r1, 0x5607) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x40040) ioctl$DRM_IOCTL_VERSION(r2, 0xc0246400, &(0x7f00000011c0)={0x400, 0x0, 0x3, 0x7e, &(0x7f0000000100)=""/126, 0x9, &(0x7f0000000180)=""/9, 0x1000, &(0x7f00000001c0)=""/4096}) rt_sigpending(&(0x7f0000001200), 0x8) 07:18:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x3d0, &(0x7f0000000180)=[{0x0, 0xe0000000, 0x8, 0x7e0}, {0x0, 0x7, 0x8}, {0xfffffffffffffffd, 0x200, 0xff, 0x80000080}, {0x5, 0x1, 0x1f, 0x3}, {0xe6, 0x7ff, 0x0, 0x2}, {0x4000000000000000, 0x45, 0x200, 0x5}]}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r2, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r3, r2) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 07:18:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x500}, {0xffffffe0}}) 07:18:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f0000000040)={0x73, 0x7d, 0x2, {0x0, 0x6c, 0xbad, 0xe, {0x0, 0x4, 0x5}, 0x2000000, 0x4, 0x6, 0xf8, 0x24, 'cgroupsystemem0[eth0-userppp0vmnet0^', 0xfffffffffffffea7, '', 0xf, 'bridge_slave_1\x00', 0x6, 'cpuset'}}, 0x73) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) socket$inet(0x2, 0x80000, 0xee6) 07:18:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1e) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x149200, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) setresuid(r2, r3, r4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000000c0)) 07:18:58 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, 0x0, &(0x7f0000000100)) [ 295.167493][ T26] audit: type=1326 audit(1558250338.338:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15686 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f00849 code=0x0 07:18:58 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x484, 0x140, 0x260, 0x260, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @broadcast, @broadcast}}}, {{@arp={@broadcast, @initdev, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nlmon0\x00', 'ifb0\x00'}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="5a81331aa764", @local, @dev}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4d0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x111000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 07:18:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) sendmmsg$sock(r2, &(0x7f0000003d80)=[{{&(0x7f0000000140)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="ae7181663844b1ec50c9ba9fb9dc53aa708ff09a2b3f92649794368c2d3c8cbcd070d93e631614807cdb59d946b46e5a6aa0c01e5b3ee074dfb27e0b5f17e25b83dac5aa67ea068f5e14a29092399215beac1ad71035a8e4c6baa1de278278b7d0df64e7d25cdb45eefcd0c0184c794e3f6ce84be3889382829f1e6399b367db06fc8f6b4e2a3c8c81683f662636c3263cd96043c36ad4ce203a8995b2c9d8a528b80cedf2a26f0f88b8f439575e919f744ca2b3e377430dc68c04b9c211517349baa3eb195e76978c4469889869e1825ee626f316107bf13b2ec702101853a1c9f69446", 0xe4}, {&(0x7f00000002c0)="47d11178a13378d341b74568bd59814a454eae7a13082c5b280db8df6ffa4e771d263dbde0bee3ed0f93eb1a4f65af831f0a24154f63746d279576bae76a138055217a29a057fa0d1d845f8beaa4a96cf460247629be999ebd8e4b2f1cdd02150f969670d4a13fd4606485526ed71fc7d26c50103a16e1c355c57f6a589eba86187597dbb98aaca06c2cac60c91ffe50d70cf8013568edaeb38b2aa3390db009e4bd71bd6fce6b3207eebc4c03cc196962c59f9e994ea2c94d38623bfe0cf321249cd03593d34a48cc2ba2cc124fd3c7d5135a2e53ec8a41dbb96b961b63f591c863ef", 0xe3}, {&(0x7f00000003c0)="85bb58f2cf37e3bd81e1f783862686aed9b11a6df9705e56c46861248bf038fa3a74d5bedd510a7d2bba048fa92fdaffbe7780b04cb5e6ac1722", 0x3a}, {&(0x7f0000000400)="f9641a006f7e6e3df859fca1a827cf974b086a7c47d6232cd1c0c46d85ab36f4569954a196f386022565ef6484ee4c7fb0e74bbb99a946e5e3f9956c3309a2cc933564b66ab2c3f92c7ef8089d1e5bb0d3118d8a2482d2e5ec8bb2880c189c26f0c917698b33e5b5199597301f1eadab2308f6176970dc06eac3e0337fcdb365d248ead64718534b48ff78ee24e9973c7d1d87b0c7b6e1b366b4edd2a8c777683031d2e0b887f952394b33b4d7e7df3eaf5d164c0219ac908a9e", 0xba}, {&(0x7f00000004c0)="b5d2e31a47a065d88047a2b679a4f67813688152ad47a160", 0x18}, {&(0x7f0000000500)="3a860df90d6360c2ed4cbc7100edf3cd3d33c92b92899cad21a202d3e09d8dcaca44aded3a43bd84e38739905debcc53ff995def24e960f274bb756b74b839112812b87339356b391fe3714bfea6bc4a20e7d1405fc0dafdf666b2a8435fe91b48a973d3ac55ffc520e45f1ffd51eeaea33c7adfb182b81ce09c61bfdf786aa36826", 0x82}, {&(0x7f00000005c0)="c45b199192f57b99b86dec34513b36a8163cb176533e849021aa9f9d84a917864098d64b7a03", 0x26}, {&(0x7f0000000600)="d067f18e6d4d28e0f1298e91e18893d563836726018dfdba7f07101e5c5b112b3c34213dd3b5a5141787a2461295367d0663aad806bacd4c7ebbf7390ab6b82fc50c59aa9dbf0224aed31882344e1864abeadbc429aeda368526f121197aa94e7ea285069f765cd302fe5c3bef85be384f2ecb4926ea502f59d241f4ed4ba00b405add1a1774c34d9debd8cf127a6b1757626f628feeb887d87487ae4031c4668870f5e693996bbcbb91bfcdbd22656ca02da976ab3aa2834cca36f1a1277d013d3b26c6d42ed73bfe2ea020a2d79fae9da4944f539cb39f3db181fa9cd13e4db563fd64c87597f65ca722fb0e3c", 0xee}], 0x8, &(0x7f0000000740)=[@txtime={{0x14, 0x1, 0x3d, 0xb3}}, @timestamping={{0x10, 0x1, 0x25, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x7}}, @timestamping={{0x10, 0x1, 0x25, 0xe1a8}}, @timestamping={{0x10, 0x1, 0x25, 0x10000}}, @txtime={{0x14, 0x1, 0x3d, 0xcb}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0x8c}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000800)="53189ea980dee31128c0d4c6dfce423b0851baaf9dc91c321ff9410825d87af8a2c4ed5173279436b0d03ade1c8db689811b03597b676caff4ea54b34e977172024379d1e1318b02e55672d9473ed43b332f2e1ca70db88a897afffefed1306d082f5841f0644c9bcaf94c", 0x6b}, {&(0x7f0000000880)="9530b8337834eafbb3ba0edc1358070221092b21cf50a1f41ae8c3f602dfa1fdcb7fa9de7c3fbd1059", 0x29}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="802b9ff64af0b7c27b5595a645f9748d19ca7ced0a5a09a2614cbf93f852e371630abecfb74d4316202d8c016a24d7ae13b2d8f68f4880148ec13fd89e704bd009df3612b19d502ac4928f2884f1b803b987f335052fde3a21f83c1df43763025239cfb9aa9ebf1ed592af3a7e447408dca3febcb465813ea4a012a2d707d715fb2b1970c5e7a0b717e2b66788b33ed29a334988f5eab6aa4ae5bf23d2cf9ffbacc606985b45bec23fcd498a2faeab5f78409ad035070712c34e", 0xba}, {&(0x7f0000001980)="0566b963432fff3c914aa988c33da7dc30913a2b851fb886b8fb314be38479cebc7edc659f262596dcac0089693e06028a6c573dd4d85fcf4fde01a62ba0494585e9a798e37fc1f15dbca407a7db33303ac2d690d402a1f16d2cdb5e5eee7afb7ad860d5f33a28a5c85a387683d453fe6667dd7ef594360f726bee360a7fa5ecd7c1dcd9da0cbba4dd201fb24b06bf89fa35005d5ca0133c9db80aaa1fb125cbbceab821f9dc5ecaf0fe455714de173bf3b522177a072bfb8a4c28b90e2b2657489873e01ef01dbf56f5bb0870f4c7c5bc15068579d9cbf131fcc4cfd71fa9fa263da7a7ddfe8c562f3a8f520fafea367205805acb0fc823c63746fecb6d7f2cc8f90952fae0680598ad4dfa0496af08ea4596ab5054c23b14a569ea94541282781a38943fe6c657cea340e001a9d8ef7091f7b1f82f51ae4f5e280f9004177b4ad55f687d272c8a67b1519731334f011315b7951c3cd52bddb9a0fd951a8ef127ab618e3accf29bcbcfb5a27f3c2c1d26b826fdde3b5ba5d9d9979353f3445d9f46c9ff8f1f22b3608563761fab1e9e17ec2ff8260693b36adb145eef15ea6178b4b62bfd52eb04f360335f40c6f71f404a03839ee6e6b9d3925f9217a8d76a1f64182cd64abe793fa06c56450f964b2ff7ac26b9147f65406a847c48499238108d1ee6bb8b8b68425bc0565f00a49bb22af72e9a1304bb346a5c888f2ca3229a7558ba2984b966e2e40cd9ad06ecc4a0d1d6ac50b795cd87d751ee0da76eb7df0041c1c4c019aadcccbc4ca1fbdcc6c14ab56cdec8dcb00e79ee26a0247ca78f6b3dbdb8918a966d129df6581b33c626a94d9f024d5c339179749f40e57a5467cd79fac51c7866758742633b3df6be8361d7e6aef253ab96fc1a9927f80be99b031dc52403d13751da6300d259f5cfc9f7839dd8eeee7192612b8f1668f0a487be841277e8f7f06f0fe3bc3a234524234e458b2e9e445831cfbf924ebac271f7a120f7bdc68cae140c09e3666aa63ed1fce20dc10c5a31e52dd777d5ebfc6d0c0bd1863374b85d86601dd08208d28d6e11eb7b86cfc729214c06e00885cb60856b4bf00af9ddf4b979c17167a76896d8bc8cd2c2558044b20b9e1a04d45d345c14b2f59d6e76ecc342e0c2e2d46c2bcce585ba9b8fb24ba6a09b946b4af5030468f2936a6a1e0beb9ecbfdd58b5befad10c608cd81b451cdb3106863d847fcbf30fc48806b53f5e0df747935f0ed6499fe78c94e88588d0bdf71d7b84ebf6ed9bcf616cd744a214ed7dd1c42ffe87b7a93b416f476b2219679e9f405e9d440a4285f00c504785623e3f85dc2656a04ba3e54a04e4d13d5aa0f0d79d6c8156cd084dc8057213a0f28e6723ece7bd7e92a1e9efe32196c6688aba05cd6abc846849bfc712de4c0bab649a3f622f48913593c03f78dc62723399abe0de56d6a4a42243de8ce71d4bb8955ac46a7ffa40caa88eee9d7f1b2b187190bd9193e1188fbf1e9631d81cfbfe41f61e42a9a208c2c093a6b091cd3b75747be280c750c7db8ebcc414527f8f4a667f7fb940fe5a82dfb968da66f26527548265b2a79adf56405caef8c87e89736da8dbe6e4f9ce8ce96dc4dff1639dacc32cd8121a3a7cd64dabf3d8968323459c82c12d2951480b98e28d4dfa925599a3dfd7d41bfa777e7b7516da77f0c2034336f420f39affbeaf2c8614d22370ad0988239423db9d1d2333919bdc7b4895ced7349b6cd8798cea76b8a73aaccd00c427f9937d96473ec47e3c3020451be40ecab72b6cc7b913d0738d4601c56531be2d8ba5f139811d1dd4e7bdf84b796321c57f9302a928d9987b06b8612ca058b48e7fa0169719cadca80acb0639fc7be91fc7244bf7ce384ddffab6f78b2b4ecbc9637cf26082d97fd906edfc27a591774174131de027b8ea36652110d501940ad48008060706a1479eba1868464dfcc37b98d02930f86b2f1d88c450ccb9ba2d4f59193cc84f9fd808c79bb7502fc1cacf5af568ecf74b2ea945bcd3cb3d9d5f55c985dc89818e9ac21933ffdb511f8663bd2089cae5587adbf1eef5bd1dad3449cd31a57356f2be63a49cda01718e94412b8292fa153d04bfd88a21654bf69cec42c97753c6055c4be38ffbecc1ba7ea5fc2991f55de07a15dd839b425e7382ae0b05b8b0d20ba9c08fdd9d9727936143f9b20c918524f257e9dc8f35961a640952ec2469762127507078dc022f2ecfe87b575d9529bba4cc8b3c61dc928725eeed31e0c06017e814f2c8f303268fd90b2b82b593962699bf41d3406e5b3f4d681fdae9b29449fcb8b35c4e5c9da6eecf4ef00256c1af30262c2923935ebf8d811d3cc131b0b779c54f60d14ccb0ba03b91f2cb358b00238eb95968e2d5944dad50124630b875f7f2bda82c6305a40ccf1f0a74371c6137f39c80265502b591fc1664cb692135b519c4ca6d7f207b461030a23b740030608333a5f067ae44bb7c6335cd1fc062e908987f0d44aad8795e197c1acf6f5ee7d999de124176659a467a08241963c96580e045846d4591aa76cf0e90a86f71283fe562011e44212b94d81d8da9bea86893f3c647c7db64f1a894cfb49df65097d007ab25a912f356c97be8fda4d3ee39e10cbb717db0a141ed0a49f999e4309b756b048e5844e4ad64a11ccc36a0a40b816d4a2eb9d18d04bcfb2284029c2cc503712488fea542355e7f55971c11ae573af13263200f47df44b559349f7a0e87647c46ebfc8b86c513a894634e1f0ad92a6ca5811e844ce5c1b07e027de992bc6d13ce7d2df710788cd725018ae853fff20bf4c66451d6313adc3fa5c3c450433dde159717294dca9f297d7a7b03d849282eeb06203979040661dc12b45aff0c2eb56c3a4ad1fa3e42d3e605ac4dfa11011d89b973510cd9477703c31961de95677fd602921a89eb77b87471f7ab2dd4dcdcbf73729ce87247277b17a2d6b368311e152b83ce684134620c137aa342ac8b5ff387e753819942f31dde4b954df4077497fddfe1334f5cf2c30acb959df11b52f8abb5fbb628a716adbe416ba30bf56dfc8fc4d4458667992f8bfa33b38d357c4d36a81d652aa0b5ccfab0d7c67ae277530ef5b73526bc86961994a752238a3d6f5a128c5481f0a65e27f974a8ca2b0dad13dc4dd1a5059caa2096b7e65b7fb9621b0ad4e5dfb78cd97bd32a188a2c2b3f882523ef674e679d71667b4e15929eaf525222c9895c91e4b2f58b3756f27197dddbc477166428b81ccb3a42e1c9d6d1cf3ffeeec94d4d582d120d85fdbd8143eecc38e2f8ffbc326cf44f16e86a31dd55330d509a2c29f3f872380ba11882cd1721b75854e57ce48ad805bfbbf0a02b69d66c47b65ab08ccb82d98b2c365972450e5cfdd8134b17274214fadee45cf90543719bba1e5b937b7a4ccdcdd67d5406efe7174b00b4a4477ce9c4370fbba5c45b29c5ee1b275dcd725adb9384e0a1f659ab743ea699b371deaf01b7779de8c0bf96f912310670300dc532d78e9ecbc79ef739c9331d6294d8ad703a37652c66f569529ea02820bcccc38ce9cca43250c05d0a444f1d13f59d8181537b5e8e6f976cf3341ca79c2ceb7502b291d98aabede8e7ed31f0f532c2006461b3a802a66218aa48d6d23b25f66de6a00588540fc640777ba0625ed30575fd8809a257a840a26a1dc53f51f631449254b68fd8f47e80d7ffc399946efc4a7123c00388ed409acb5ec6b19f98e5d711ee716cda764bd09a8a9a40c629197cfa9c39c012f5961b36455f171e209910ba624eca6f9b1fdd5d036282dd8b169811aa9a85e0c6a3d8695e728bdc472e3052055514e73992b37b0a50274ad860c4f756f388788949db34c721c4780f072ca3192c1f9bc8b1e2e64604f4014bd59bc65e2a873a81c3452fd0dfd0cba4007bb9659833e4e14b3aefba37cfb41ae08040c26619daea7e3587bb0a1c17d4cd540c73cace6d8416cc93bfbab2c120d44d988ce001239d28427ad8839018fea77aca8f6f60cbdee433bdbfe58102c1edecc9566967a35ee4bc203ef879de320d1df019b3393a8cdc2009b88552a0c8717f6a34f365e23b17480a2491b85c89fa33a173a557d154a1c7a12f877ede6ac328c8dbc5532c1a753aa9d7d7e26dd826af6aa82d7daedf2e890425f18174027fbff914942c1f92a87077892d567b4fc312492a2d67ad028dfc2d4edb5706b45cedfc42b5808ebda5ea79d5cadcf2cda1ebe13da075dd86e637b3481238fbba1401fb97662524df3a4dacf491a87f7b88a3599ccb7e8e2a68da9030958428389dd4b2b9214df8300b0128fad1858d3675cc13d5a308002485e2643e44bd8df673cf1b7401b39f1d2b0fdec4b62af2cef61715271babc8c294620badf5f624f1ac27a501e49bd7b14846c25dd8063dcf956ac6960a9bb863bbef007f4c1c6f7bc39e716b7841a8d1e9df542650118f9c3d7421fc1e7e01c0140f253c1596fb1e9a5ea5551ba7fe437d5c108801b2a4c4c8b9d8ce541962f26aeca64a3a36b5635e1437645a7525ef7188a6d9555387a5571204bf946d109e1370703b22b1c5779a4436092da654fd9d595ae4007afffc8b6ecc6daf9006da9e3075041680f60c4a9c881afdb36b63921c8d026f206984cace644a51c5b034bc97510f777f338613aa4df422bc4521f2c23902bc61cb4668efda07de08779af3861b79221c5dedfb7d13076e2b915a0fcab985f2cccc951316d837939d8c41001155e3c8c776c85abc653fae562d8c07c432eb8eb19a356d558d4d35d97d12fc27f0fa2d9c212e4fd62d2cbfe57636a943aa0a8b63e13ccfc0024c39d5d5bf9e7d8f0ed9114263d9d5f101fd321b3a028ee7b8dc3e85a29964de14c5d786e2873b0bf609048492a192104226077847be8b1baeb41868c2814e3deaad94f1f21f8b312c3c061c0924b157082586a827d62d9501f37f4bcfbb4bb7db610f0b06c54e78d262ded5c325443a91b0dbaa7c0538184ce684691cbba534a5989c9299fca6327e93d332e944c3e30866715858b524108e65f2cef6a85cd47b6bcfbed31e10111469c326182455328f985cc61d756d5bd64614ea0fd9dcaac38d3bb27791c312cbcefe76e0970eae4e5cb87cb69ead05f78c38330f7bb45920be2c70966697f4d86fa6fa380a200eae8b2e1988141522d28faac296ea63bbd034c00a0c290d71fec8195a650beb34040fc8f300cf7d424539dbd0487afefd1cbdb5f4bf9c1e3cddaf012021ca3e66c2a09d98cf294998e3fc36d41a0d78281addee7b2436befa67cb23843c5102b9b62c4666ebd163a1914dbb92597d46ad65762746bc370b59baa8ee9de62e50a0c3836f528862d5c68a8517a3ae7d0e129eab23de1558ab725283abf7b730e3199f2abe8c1412938f97d22b888a0b59838775770f7bc9256f43403b7a593ade560211c0cd5c2c6904118f59bfa186f0c2e21f9f27545dea6172674c11249c51f79886e8af54941ec571fc287341bf0b4900141cfd395dffbc8d66cfbe56a9b9b87bed035e6358af9aa14a3afd6327d427dcb702c90d0e3f9e44eedd98ce03fd7b1a0bc61a19c6d28374bb84be6d8be412d7a18c19f31215610b0cb0a42b04d03e9b72eb420c73cef9bb8f49369d87478b9cac1da084e72a43b6802d6523e02aa4d7f054151477d0b985cbac6053fc535ef38bf205f56950628aa2901f7c2f7e589aa79151594b1eb435f92e91274afc6566ab0a51d9b36ecbcf8f19aa55309d404896136b8c90745a366afc6e88f57eddc7242cb09baf53cfbb9dee24ad3b525", 0x1000}, {&(0x7f0000002980)="daee5996e3762b29bfb35a4e2b9c7112cc782aaa54b76f0552cd4f5b18283cdca0b3c9c66375806c058dcd9d107803519729c0ad69d59552f11c8159203af817c65b25d7e7e228025b656a38e25144babd67c8379b3f474604321c86a63c0397d203e7a6a15e459d8ed62aabec0f845be4dbbdcd99e52633275457c3a227f902e42a8a0181cfd334fb01fef5e00ecc7e381b89478a75962898130bd85f616cab5a5c4aa09fcc35152b45f979c0ad9980a503e11e9df81af26116c3f30675ebc7ef2c572aba5ac5682e89a6b1c8b06509c50fd7787ec533729505b65a1cf160433c", 0xe1}, {&(0x7f0000002a80)="c52c8066323b7cd68a81e270147923b9adc1569ff28cf8bbf24fa0d8b1881ff40f50d77304791e3e8b7d7d054d9d5e0f328d0515", 0x34}, {&(0x7f0000002ac0)="645b63d2663a52a58612fd08e93f3a9d308402da79bdf63e80eb8baf3fe7799cfe360324eb13d952f8a6e6f84ddb91d119919892690e83ed7ccb1be6dfa8ef135098046d508f802e5879b435e2411da228b4c835f60d17e28dbdc7d207afd79c4a24747d0e512d1daa24b9a7ae6842450c53a368c8d5790a86c9573bcf19669d997d9edf02646ea683f29e1846feca914e562ad1983c2a40", 0x98}, {&(0x7f0000002b80)="ba0ea10c84d02b606afb2242710a56e9b165d939d40520808ead67214ead3a6b25d0abded6aa9a7fdf1a2a8c4cc61337b9c6dc6d7a2e14e6b23a4c8a0a566f2d2e56b9713e26230a8724c25bf72f510a7c1ca431512eaa2b0fc038071e261dba7ad96ac67004c735f6931ae14e49529120ee277bd15fbac5137883d68992430beea38f934371340e64103287fe8324523a762777d189dba945f0f5cdcf8ef360c5da98af47f63422796d576719d1f2f745a692023d3fec09173ac9b92b830fe8ba87b09078ba50f0a5d6aad6de45023e33d8947c75acc227c5153711da8780b90c99cae99b66464cba2f23fb50f1", 0xee}, {&(0x7f0000002c80)="9634849e80eac2589d692ca541c339e51d781a50388b5ac2a39c23d1e1a2ca8b48e5cbb870dfafbc4ed7e00f0aef7d1cd8ba30fc762c198373d8f222cf7c0ea020d1a9d3b6b867fe1735b3d4d63caa5f51dae746d98f80920d97972ba923a5425a9bb2ebfed4bd8a2d28a37a94276bfddd32682457a396f2ffed8f31d880e322a862117739b52d3fbba2f259cd0f8504b5f3ddd6ee511b095010350a4ebec37221de0b69cef3177f788a5540ab457af12d022032c3d87b81f67815c2dedfcad3c954b7edd273b127c60bb6764b5ff70c4cc82b6799a2bf6f528c6e403d8018d2fac14ec1fdbd2b6a62cde857cad1b27d1a51307bacb0e713d9ef8a09816e7807e72b9b032dfed9b5c9b211781c0d4fd1038548d437855813e81d98851ef6f81b263a1a430501c051d0bb7eb18fa874d23b208116dce55dbe0d7bf58a34c4972c841aff3c501a95e259ece279ec27b7ddba876e42515498696385db37c67555f05e1c6c369c046119ce37d7dbb098ddb4e3672082165f3eb9ac6f99aed07ed8d1d617066d45d832435a203b3c6c43a5b3cd8738bb12b994476948eeb86d04c94ce0226d0cead5035556db1a8b7a7bed1a2b921c328dd87b3c41d3828492b6c296965e544eddeee83cb9fe963ce0985aa43e8fc5bbb5076a4442a85a00c9dd7fe533c7998b225fb637f328160083496fbc618d05c0f60b223b9ce9cb6c7b1c0b29a59223ba5655f5d708a7bf19fde133529f977292384f78460d30cbe36a1352f56405c387c0409c92dca2481b9407b080ccb7b3d593f6a697fba799c3b4cddb4c66b7962ed904aa73f61f567c0aeed030f66eb565839cd5c406553dd3e2de824e123e26ee2c13ad35d38f2b1dfaff5a7269796da4c1f7c705b5f108b87d7b23269aaf1f9162c61c8d908c7fa49d4e9ab08b07147d9a5f5ca51c4d430bb97ae3c684775bef7479b8ac7d1d1cc5f418641b26c868479c6b6711edee06c4ae20be47b5dd7e1b074b63a864e54d17acfeb3a0c9ff83acf273e1e729492f6fbcc3bb03065007ff70e24726e73402270f4ee135d9119e88dc3d690647283364bf46bb909b6df7d3b30d8b9ac6f22a77b1f50e392bc6c5e692d2d7ec501e699ef9c8b4fda756854405e9763e51c3a7174362209ebd906c5d2a80b0ef1f4ae3869baddaab421a79b093be600864e3fe6494664bf69e973343dec01784628128d7ea82f5b85c9272e2645d519e7618cd5ae132b085d45a125d73852696536b154914f31b81ad83bc72a5824897c033a29760f14d5e461bc5fb76bf852a098617b368357a1fca8b4464982f42b592fec62f3371589d4ef3b9ac440ce31b325954e23a4909c23792ff054cfd843548c4c9b75c8cd5a1aed660947a45041017fe931e9584cf89b7d06cc88524b73c0865859cb36277898a3f0c19b9052ab06ed5ec702cd89ac258471d885de093bfe161b4aee0ac60e722b7a085ac2e4acc6d4977bc2d748ca5978014a2d57b0e91eae75a4a37536cf38d6c123a4c702eb8e7abc370f4c3485466571b8fbce0b7a418354b66cf0a693c3848da6fbcb5fafdf230507980a08ff088c1518998d498202b229a26b81ed5954fce25aa32dca45fcf42fc376e3328158b98e2d39e101702389b87aa51c573e738605950694b1a433e5af757653c3eb416dd4a9e0021337b495f0221a13966708e80f1c7016ef3480ad0d2a90eb5c06adc75e2e6bff142b6ab5d774fe294bc723ba537c0fc13023927517d473280b26f51cd68c25b97d3959c97a2316c30355a91cb4e0728e1cad3894b703f169729fb00e52e819371b1a7ce8b9ae18990f4c18bc18fb9f3c5f180ade82663cf9ef316c5a0d3a7d00fd7aeb2bb6023bae11455a41b2c0716b76238da1a56160df2567343946b821d939615ecead3d3bfd6f8216505e0f8cc26e7fecd4c9a0aad8b9b04a9301c8e7d474fc1f01da7026f8ed9bbb64ea7e45c70c1e83e95c094ee6d1b7decd5122a94a81bf62277593f998ed2e6a5f8f60c534fff374d1c2223572b70b602b111ec0fca547f273dbe8cbdb033dc4b4920285f17a596fd7236eda497f1c20300635525530c6a61d72ab3dbbf3b95c5eed3566be6879522c0a78b42fd156af6f718dc4345abc36dcae9de387fdff98b17c9df82e0c1dc1bb44a0b66e64fffe6d530e6366a975dd24f7ba4b16e3578efb991728e778ce401226ed52b92522c548ac7dbb777fa3a45779f82f0a440a2ed25354eedd51fefac46d9f5a8896acb2511e4b22ccef36b9d60b60979847be0b250ae2588474405ebd95affac5a985169838d3ed85fe6c86082fa7ab70e73bdbc4ab5c8bdc714bd0a67dad576fb34713ccbf07d606a01accf99dff7e75a60a8e9fe0f5f9bc26103a1e6e84d02e2e2393dc087b2ec0af4186c9982f22dc167a9fedd20cda10ac747af78b63f2c4da0bc9d9dd3b9fdf738d1b89798ef0b7a2c419029aa9532c9b2dcac5d0f99e703d4c62da7c1726783e9c031a96af850b6e54eca4f4781285d89ea1e64214e1b7633f5d7d5b6c900b55c0a3c1ed5ec44cc57dd80d79c315429b3a22da4f88a5a71d911edd19f5164d02e38417871506ae8048ed18b4bc3efbab1228bc2bed103a213926f55e890e5c06abc864f774525dde4fb9773180c93f6a17cb60e9fcda1a3807bc6e0d1429639ef129086bbe48fa01b2312f83d8103cae094b087e5c919aa25385e8ff185d89576c6786a8a94b68a51d88c69d20734c3a3dbc626b0ede93ecda43d55812df331d84ded75b9a723fb03483e1eb953d9d309c16406a42f7ec9c511d91a6b9e14f1cbb765567a26ce0609570a44823029bee07766782b865d27f71916a3543f3e4dbfd553059ca927bae979be23b315c166ba37dd53ccc224c06ce7ffdb3b574c7ddcb027ddf0dffe4e537f3ff7fe16e1a64c597c730b7a84368f5bdee32cc284619314795858d44995069e00c0280b38ec6550f8e903b44d8052fa85e9678e099a7e1fed75a1f751e29c9ea938346b71a69d8670d15ade2b75ddcad0c75a4e762b5374cc32b3503cd61b703557535fb9231df035fe5be776e2cc6fadd9d3f4f9fe04250b5009d56d594c125d94dede5af884220c5260331e215677e9701bfed5282e403b7d302972651f80f5ec7a09753836c32748746601bc4c6dcbcc5c91b3bf9c6a435e815b3ef186825c8fe3296529aed61f3f2bf02102774523fac2e29b2a6aaf10456f13e1bed0e0172602ef019f5061bb3b539f8b0af3273a46d6a020b57f27d05f45fa838c696bc420a9dd6113c48b29de1c1d2c9f0af01d13b0fb0d197704f1156217f4b1781f8489795f8b373d407189f140d71d5b3346c2328f8f21ad96fa63e1546a32ce1d4acd6b90eb92859c830ec3bc6e85d8737460013521cdb1d9a546bd9fab83535da26df9af7829cd8119c4bc0dc116e70942d5a9b72fe75b5f69a74fc5cf7a709dfaf89dc3aeaa2090e8ca220d7881ecbc684625c39fc5b40a7184978610031cedeb017caff577a5e54fda4bd1cdf3e0e561c62e1143644ac74ae22c04061de05e65084d5f5b93534df129289a066329e5124d15bbbedcef2741aad3e27b73da03aef502f7a53e0631d6c0325951ae620d369953f620daed3ed675e3779a8f533246f399af742977e32e748fc3c3489e438630bfbecf2ccb2ae2a304eb2335f71434a044dabaee91dd7c1d9bbf3febca8ec2d8c8b7ac4a0c91450e3219fac1961a57f9d7f4f649588aeac7250615d71acef98524b70dc843ad7a74eec20ac104186b7276e3db6d272e4cb1c142d53ade3141cf2f7e100c3e47d9729905a2c8b4e8c96ae0e1a3953854486c5b9d452175f6876287a65e2cc90d0589c173ef152096f59cb1966a3c4c25dbcc63c3fcedceedb54550f3da49eb7117022b88a7e863153db425e735615580c6a5c9a2e6d28d8d3839fd465d60b85f9dfbff96f45275877af02c70b342fefc79a1ddf203d1eac474c9f4d71fd47f41af06eaa4be712f57f9b1a2c82e579e14864bdce433e6fc1ffea2854c6f1094ba41b0cfcdb44acafad2695a25e77e02eb690e9426ed9b7b1a0ff782df05249ea123eb317c7d0fcce2b5c5c7ca57fdacc8cc98aebd24eee9d1602e99f7aa757128e930c2a8927e42deefa26385cbd2546c8b96921a6214b1222c1c6e84fc53711943afc8b5f34d5a62baba2ebbb54e4cb0d0cbb27023fefcfaaafcfa6f03502c33b72ac1c6cf143fbfc3f3f27339e3c94d1cc94530f8c88994f6f6d2d3641c16f16c996b0f464f4b705baff4c91da7cb0536d40fed9e8ff1a5ebe66c55cf90c0be28156a991d56708886d5fcacf17ef0a029c0087717e00fddcd9fb4cc35684d70801128edf51fbfd5c6f179ea4ec4b9ce1cfad7b7979e56901e28c3e62d791ee8f7b24fe202134562284b02e1dfc35e86e3694ad530de30dd48e7241801d7a543953df00f9ac89f291011ee281d0b5674625644832be01d037b09bbe7a4443b823daf10484d77212fc4fade0e2121589f9d79f386f130c2c80fae6033b297fc37109082b6505928e6c270f628728d31ed36df6e07a1bddc1d3a8372da06c1df92be02e4ad32b91953f481f1f0b95bdb17fadc30d69de9e23845e8aa003b7c9043c20a8c50f1fde0f4076ddaae408b4b62a22ddc414925818c3f8b2d05d65befa577cfd9b2b55378bb10cbc810eb08e5092b84b2b0bb934cf8eb0e7c5bd8bb8cf62aeb33f88d3876047a7f351f09818e293de4d424dbc30d751a17e553333a35d0d147827fa0fbb493454410f84783f9e48dc15535b590a17d9c259260419822fc81e2003f28a665aacd7457d85b00d31fe5722ff3e1848d13f305e90efc9c4c057a4cfb02f45b3817b41ed2ea3f4259c1cd1994432f49971fd249474d1eb5dc9a4f6d47a8d1bb2a943269d448b1b5826545a4b77051cc7438dd454ffb4c102f55d9675cec176da092e2014dc9d7b289ab2b6cc0099c1c8a7a828e799b662b84c547bd85c255e0c8d2daa96e76d28fe91cda5525ee64a31f0d1075f1d601b1a48e116ae3cf8ea4873c476d47e253220bbf702a40fdb1b24e22b80a3bcb61173b9c34ec4a82c4fa5310ebde81b63ea208a9bf701b2cc016cc6dfb4c529a3b1f72fac3a8f31b73263369240fe002fbfe3f6ba5e135210f92a1a07ab199df89084122faf85a738c2518285399d183de31394bbc8a5a171f3784334a82418d40a97054300e602413a05953056cef38d3b66b6900520393a14aeb573f780400635d2a50741dfc975774acbf6bd42a26107d3bbf049a4278860199737c5682d51f57f917a236b45238f0f58449cc6d6c07a28591ab1eea87cd34711b9b9ee9f10e1334c75b3bb50d80bd4b4f74609c9abdbecb213e3a4376f317a9d7803bdc210dcec6f9ad5c0b76488d89e17d069d6464339fdb6e8072848d6bc1c2bfba484da432b5cac255d772b7ca0542a3a9fbf5273c2e357964c3e86ca73298f995debd32cfe6cbb34cc00d29a10ad3dad5fa9326868215289fea3c41f4b373f55214b65eeaa4b73b7f93eb74874db16b42c184e76e116da6ada81506d81d0436d0f4aa3e6b286337ef82e74f963bfeb380a14a0eced2ad3805323be82115746beabf237209873db183d2a48e56de309b4f704c835d42b811ca52b127f9f148e4fd346cbf3279bda204da6b1eecac66e7d32fded5f377df8ad12a95d6c604e88a33db6a0954a800dea621dfe3064c263a6e88283467d402e1f07ee45717dc1d99bbadbb5099591b8e85e314321eacdb4154838ed68f330c9d65cc5c42bcc667", 0x1000}], 0xa, &(0x7f0000003d00)=[@timestamping={{0x10, 0x1, 0x25, 0x9c}}, @mark={{0x10, 0x1, 0x24, 0x3f}}, @mark={{0x10, 0x1, 0x24, 0xffeb}}, @mark={{0x10, 0x1, 0x24, 0x80000000}}, @timestamping={{0x10, 0x1, 0x25, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x81}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x74}}], 0x2, 0x40080) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:18:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)=""/214, 0xd6}, {0x0}, {&(0x7f0000000300)=""/75, 0x4b}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}, {0x0}], 0x6, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000740)='net/mcfilter6\x00') readv(r2, &(0x7f0000000580), 0x3c1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r3, 0x81, 0xef03, 0x1, 0x1000, 0xffffffffffff620f}, &(0x7f0000000280)=0x14) 07:18:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x600}, {0xffffffe0}}) 07:18:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x1fff) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0xfffffffffffffff9}, 0x8) 07:18:58 executing program 0: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x700) read(r0, &(0x7f0000000080)=""/82, 0x52) 07:18:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000000)=0x3ffff) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x8e9, 0x3f, 0x4f76, 0xffffffffffff8001, 0x3f, 0x3, 0x3e, 0x7, 0x1c2, 0x38, 0x1ac, 0xfff, 0xf29, 0x20, 0x2, 0x2, 0x5, 0x6}, [{0x6474e557, 0x8, 0x800, 0x9, 0x9, 0x4, 0xfffffffffffffff9, 0xbfa}, {0x70000000, 0xe000000000000000, 0x8, 0x9, 0x100000001, 0x3, 0x10, 0x9}], "2f115f73176a0ca241878a15d435f7d6736f675a7bf5778cc794043cf044fc7ead065de41413465a6c87fce8236600055383e70a236fbd342fc9a3bd4ed2f314d54f7f04191b198f71ae7ea16d15b9b67cf17bab212b797a471c074b754ebd9768a73b3390e1060a4558dae3aa44d1d036ed90f6a2b8687a9ddde3ce33c2d31892afa42355f25772a09091", [[], [], [], [], [], [], [], []]}, 0x903) 07:18:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x700}, {0xffffffe0}}) 07:18:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(r2, 0x111, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 07:18:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x7, 0x9}, 0x3c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000140)=0x9, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x1, 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x2000, 0x0) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40001) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)={0x2}) unshare(0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000001000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0xe000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f00009fd000/0x600000)=nil, &(0x7f00000002c0)="e217bb21de0c4ad809c408ba24864ed39ad4932c6158a9c59e919e2f877d27dfb4ac75ea2bc0eb36e27c2c1fc2fc8af35b63325d55bb5e366957e4ce318a2bb800c661cbd38611f00d70a7c47ba63dd3f5d2f118e979cfc656eb12b4fff77d07124567f25cc25943eea8", 0x6a, r0}, 0x68) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x378c4c8f6d8178a9) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) 07:18:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x202000) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000240)=ANY=[@ANYBLOB="01010000000000000200000000000021070000000000000008000000000000100100000001000000000001040000000000000000000000000000000000000000000000000000000000000000f9a3a320f6e929606f874647a700000000090000000000000005000000000000004000000000000000080503800000000000000000000000f4ff0000000000000500"/157]) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x50) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:18:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x1f00}, {0xffffffe0}}) 07:18:58 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x8000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5c7e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x7fd) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x10006) 07:18:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:18:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x1, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x43a) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/udmabuf\x00', 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @multicast2}, 0xc) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 07:18:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x4000}, {0xffffffe0}}) 07:18:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(r2, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write$P9_RLERROR(r2, &(0x7f0000000140)={0x9, 0x7, 0x2}, 0x9) 07:18:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xff00}, {0xffffffe0}}) [ 295.961533][T15795] *** Guest State *** [ 295.982936][T15795] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 296.018111][T15795] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 296.083044][T15795] CR3 = 0x0000000000000000 [ 296.103496][T15795] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 296.124298][T15795] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 296.136480][T15795] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 296.147589][T15795] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 296.166626][T15795] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 296.184182][T15795] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 296.199218][T15795] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 296.211110][T15795] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 296.226742][T15795] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 296.238942][T15795] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 296.249861][T15795] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 296.258868][T15795] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 296.267721][T15795] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 296.276480][T15795] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 296.283741][T15795] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 296.291977][T15795] Interruptibility = 00000000 ActivityState = 00000000 [ 296.299137][T15795] *** Host State *** [ 296.303103][T15795] RIP = 0xffffffff811b4620 RSP = 0xffff88805b5bf998 [ 296.309919][T15795] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 296.317177][T15795] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 296.336328][T15795] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 296.343075][T15795] CR0=0000000080050033 CR3=0000000098501000 CR4=00000000001426e0 [ 296.350953][T15795] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 296.358393][T15795] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 296.365285][T15795] *** Control State *** [ 296.369516][T15795] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 296.377077][T15795] EntryControls=0000d1ff ExitControls=002befff [ 296.383376][T15795] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 296.391021][T15795] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 296.398455][T15795] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 296.405982][T15795] reason=80000021 qualification=0000000000000000 [ 296.413014][T15795] IDTVectoring: info=00000000 errcode=00000000 [ 296.419314][T15795] TSC Offset = 0xffffff5fa3a48b41 [ 296.425115][T15795] EPT pointer = 0x000000008f4be01e 07:18:59 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x400) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x13}) 07:18:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1f) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 07:18:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xff03}, {0xffffffe0}}) 07:18:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x7c9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r4, r5/1000+10000}}, 0x0) 07:18:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:18:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cpuset\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x40000) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x181, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x100000000, 0x3, [0x9, 0x9, 0x100]}, &(0x7f0000000080)=0xe) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1}, 0x8) 07:19:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x1000000}, {0xffffffe0}}) 07:19:00 executing program 1: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x3) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000001c0)='/dev/zero\x00'], &(0x7f0000000400)=[&(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/zero\x00', &(0x7f0000000300)='.\x00', &(0x7f00000003c0)='vmnet0GPL{\x00']) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) [ 296.884942][T15829] *** Guest State *** [ 296.889438][T15829] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 296.943832][T15829] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000180)) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 296.987925][T15829] CR3 = 0x0000000000000000 07:19:00 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000280)) timer_create(0x0, 0x0, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1, 0x48) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) 07:19:00 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)) accept4(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x0) [ 297.011585][T15829] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 297.034197][T15829] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x2000000}, {0xffffffe0}}) [ 297.068686][T15829] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 297.161516][T15829] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 07:19:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x3000000}, {0xffffffe0}}) [ 297.229648][T15829] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x14) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet_sctp(0x2, 0x801, 0x84) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x1, r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x380000000000000, 0x8000, 0x7, 0x6, r4}, &(0x7f0000000280)=0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) 07:19:00 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) mknodat(r0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/91, 0x5b) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) acct(0x0) [ 297.270978][T15829] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:00 executing program 0: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000002c0), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0x11a}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x2bc, &(0x7f0000000140)}}], 0x40001ab, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xfffffffffffffffd, 0x4) [ 297.316034][T15829] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 297.336422][T15829] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 297.382825][T15829] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 297.448792][T15829] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 297.561748][T15829] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 297.611387][T15829] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 297.620375][T15829] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 297.634837][T15829] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 297.641974][T15829] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 297.650668][T15829] Interruptibility = 00000000 ActivityState = 00000000 [ 297.657887][T15829] *** Host State *** [ 297.666791][T15829] RIP = 0xffffffff811b4620 RSP = 0xffff88805b2c7998 [ 297.674498][T15829] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 297.681616][T15829] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 297.695545][T15829] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 297.702160][T15829] CR0=0000000080050033 CR3=0000000092f84000 CR4=00000000001426e0 [ 297.712673][T15829] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 297.722735][T15829] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 297.732290][T15829] *** Control State *** [ 297.739033][T15829] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 297.761004][T15829] EntryControls=0000d1ff ExitControls=002befff 07:19:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = socket$kcm(0x11, 0x100000000003, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, 0x0}, 0x0) r3 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x1) linkat(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x400) setrlimit(0x7, &(0x7f00000000c0)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f0000000040)=""/119) eventfd2(0x0, 0x0) 07:19:01 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v3, 0x18, 0x0) r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb9030006000084"], 0x16) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = memfd_create(&(0x7f0000000040)='security.capability\x00', 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='hfsplus\x00', 0x800, &(0x7f0000000340)='\x00\x00\x06\x00') ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000080)=0x80000) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000580)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', &(0x7f0000000280)=""/140, 0x2f4) 07:19:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x4000000}, {0xffffffe0}}) 07:19:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x200000) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) [ 297.768416][T15829] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 297.776479][T15829] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 297.786198][T15829] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 297.793872][T15829] reason=80000021 qualification=0000000000000000 [ 297.801741][T15829] IDTVectoring: info=00000000 errcode=00000000 [ 297.808155][T15829] TSC Offset = 0xffffff5f26ef94a4 [ 297.813374][T15829] EPT pointer = 0x00000000a2c1101e 07:19:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x5000000}, {0xffffffe0}}) 07:19:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x2e, 0x0, 0xffffffffffffffbd) 07:19:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000280)=""/29) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4e, 0xf5, 0x46, 0x7f}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 07:19:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x2, 0x4}) syz_open_pts(r0, 0x0) dup2(r1, r0) [ 298.161478][T15900] *** Guest State *** [ 298.225278][T15900] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 298.254057][T15900] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2000800000001, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0xffffff19) close(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 07:19:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x6000000}, {0xffffffe0}}) [ 298.395771][T15900] CR3 = 0x0000000000000000 [ 298.400350][T15900] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 298.559995][T15900] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 298.604546][T15900] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 298.612226][T15900] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 298.623886][T15900] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 298.632825][T15900] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 298.644745][T15900] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 298.655419][T15900] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 298.664831][T15900] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 298.674463][T15900] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 298.686746][T15900] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 298.696246][T15900] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 298.705745][T15900] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 298.728268][T15900] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 298.745109][T15900] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 298.773490][T15900] Interruptibility = 00000000 ActivityState = 00000000 [ 298.780571][T15900] *** Host State *** [ 298.790093][T15900] RIP = 0xffffffff811b4620 RSP = 0xffff88805b2c7998 [ 298.796985][T15900] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 298.804685][T15900] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 298.813187][T15900] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 298.819826][T15900] CR0=0000000080050033 CR3=000000009bbd3000 CR4=00000000001426e0 [ 298.827592][T15900] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 298.835001][T15900] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 298.841755][T15900] *** Control State *** [ 298.845952][T15900] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 298.853348][T15900] EntryControls=0000d1ff ExitControls=002befff [ 298.859481][T15900] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 07:19:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendfile(r5, r4, 0x0, 0x10001) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000280)=""/29) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4e, 0xf5, 0x46, 0x7f}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 07:19:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{}], r2, 0x1, 0x1, 0x48}}, 0x20) 07:19:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x7000000}, {0xffffffe0}}) 07:19:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006fe000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000701000/0x3000)=nil, 0x3) [ 298.867933][T15900] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 298.875393][T15900] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 298.882664][T15900] reason=80000021 qualification=0000000000000000 [ 298.889775][T15900] IDTVectoring: info=00000000 errcode=00000000 [ 298.895969][T15900] TSC Offset = 0xffffff5e84eff1ce [ 298.900981][T15900] EPT pointer = 0x000000008afd401e 07:19:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x8000000}, {0xffffffe0}}) 07:19:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5ec, 0x80802) ioctl$KVM_CREATE_VCPU(r0, 0x8008551d, 0x20810019) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 07:19:02 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x8, {0x2, 0x1000, 0x3ff, 0x3ff}, {0x18, 0x80000001, 0x6, 0x8}, {0x5, 0x200}}) ioctl$VIDIOC_S_FMT(r0, 0x4014563c, &(0x7f00000004c0)={0x1, @vbi={0x0, 0x0, 0x300}}) 07:19:02 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000300)=0x9, 0x12) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x600, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x30, "720d2925a12f1215ec8323c103d93edae4091d272c8b3f0599c5ce75856df891c69ada33c1fd39411572323665d92c4c"}, &(0x7f0000000140)=0x38) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x3d}, 0x8) sendto$isdn(r1, &(0x7f0000000080)={0x6, 0x7fff, "9a"}, 0x9, 0x80, &(0x7f00000000c0)={0x22, 0x0, 0xffffffffffffffe1, 0x2, 0x3}, 0x6) [ 299.202677][T15952] *** Guest State *** [ 299.248892][T15952] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x200000000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x80) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x1f000000}, {0xffffffe0}}) [ 299.304889][T15952] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 299.343553][T15952] CR3 = 0x0000000000000000 [ 299.391759][T15952] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 299.410879][T15952] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 299.470153][T15952] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 299.481117][T15952] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 299.497555][T15952] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 299.518205][T15952] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 299.550314][T15952] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 299.560366][T15952] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 299.569497][T15952] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 299.580400][T15952] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 299.590758][T15952] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 299.605614][T15952] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 299.615513][T15952] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 299.624449][T15952] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 299.631648][T15952] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 299.639868][T15952] Interruptibility = 00000000 ActivityState = 00000000 [ 299.646932][T15952] *** Host State *** [ 299.650851][T15952] RIP = 0xffffffff811b4620 RSP = 0xffff888064ab7998 [ 299.657613][T15952] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 299.664865][T15952] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 299.673497][T15952] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 299.680143][T15952] CR0=0000000080050033 CR3=00000000a11fd000 CR4=00000000001426e0 [ 299.688253][T15952] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 299.695808][T15952] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 299.702597][T15952] *** Control State *** [ 299.707003][T15952] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 299.714612][T15952] EntryControls=0000d1ff ExitControls=002befff [ 299.720872][T15952] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 299.728684][T15952] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 299.736156][T15952] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 299.743667][T15952] reason=80000021 qualification=0000000000000000 [ 299.750715][T15952] IDTVectoring: info=00000000 errcode=00000000 [ 299.757010][T15952] TSC Offset = 0xffffff5dedfd3dfd [ 299.762094][T15952] EPT pointer = 0x000000009634301e 07:19:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:02 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101080, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x31, 0x0, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000200)=0xe8) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r2}, 0x10) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000280)) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 07:19:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x0, @rand_addr=0x4c00}}) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400, 0x400000) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x200, 0x2, 0x100, 0x80}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0xc0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) 07:19:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x84f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x12}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000300)=0x60) 07:19:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x40000000}, {0xffffffe0}}) 07:19:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xbee, &(0x7f0000000180)="0aaac6563a74ac8c161ac6919da1fe260f9b09ac0793ad2f08410de2889416ecda9168ddf108f04babcfc689fbeb8629d1e1d0bf912cd3d155d007bcf81061e12d0b09dfb6c905c735505166eff08f2e71c739ce9a6fe790f77e8adfc077b91ba25dd12946dd049c1d9eab1dbee55b7545aebe1fb91bde4de6147c37039f9627c276b65d92b15156b3b1702aebce56e9ee56536293f4d7bd2dc3fe6172ca058012796f922f50896304b7f0d5c98289d6e4332d5e") r2 = dup2(r1, r0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000140)={0x9, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfdfdffff}, {0xffffffe0}}) 07:19:03 executing program 0: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0&&\x00\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:ipmi_device_t:s0\x00', 0x23) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f0000000080)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)="09e43624d50c81c0dd79936dd88ac77d5d0f9f5208610ac18bf06eef84aedb29e8b839640aa6223b9665c5fc6e9f823ab5ebae8851969ad54c340e223fe8f723b8c1bd8f4fe446c3cb104437d8f541c670b81ec77fa4fd51bf398c7c919979ef5c4bb679f15866d90ce1caaaf1d675f1314ee02f62caf50da8314e94408b710cf4e97137518611361c735d38d709787f8fd9cbff753909c2847b225c020baa4b06370eb3d2511afec6129a4c4dbe0abbe34e7b65f90f936bcc5f9c41", 0xbc}, {&(0x7f00000001c0)="8c883b1a8fbf1560", 0x8}, {&(0x7f0000000200)="ade325b8d2e2182b16b87a6395153abb50af07e9ee93b259b517fef2dc16d0d2c2cc1ee513554d71cccfc7993cdc29746c9ad2ddf557e0a43370b2209392cd398062a54a443657d7ad533a334cbebc3454b8f78c1c12d84faa5c71081fcffab4ba119f635a0001788c5c251ce383d56c5869275478c6f9f8e2b6505482ad29cfefc3b0ee175b7f3073eeecfc6a4cbe803fc940f801d74db4ec18a9e2299b", 0x9e}, {&(0x7f00000002c0)="693cdca530adf2b89e572e251e93ce3a6597c1c6f546296c759520aa4bff2a712e86e576bd402e281547ee9d42c30b82ae5f6110206e789b80f53f4da708af4f477398f1ef04c1762be46b9c2f7359fff212de8950ddea74c7bb784440320407ac7f510217f53f060e22ab8415e14e14fe0a0833d52f8f25550a6bd6cd25774f3af9ce27dc2f30bc6070b34ccf08fd0d75bb3d96b89edaf5296cb03c9c87290570db43ef41facaf218cea674bc593f8a49789dba81b0a4590db9ee3e7ee21da345", 0xc1}, {&(0x7f0000000540)="f702108307fc752a18faab3534be2d515e2a7a61bc8ecd6cc9eb0e9b609043018c7d74a50c4d9a2249c45fca659942ab203fb55548fa6dbc47c652ee185408765fe6ed07f579b4a3b48c1e4d461717058ee8e656c3457969bc8358cba90519fc7be0", 0x62}, {&(0x7f00000005c0)="0b30f5f67f0e4cb1177d082f7efebd78fa8db1685308435aa3a02780d88c401b24f3910de0942be0e1ec874e3bba3b67834b44a8103d04f0c888d0ba9fbd1ad792b186ed7281994738f05df6006776589534e2a1893f86eb088388c3affa8f9b8e142d5b4947d45246a31a2e143ee38eb18ab213e2a34a5a33c5f87906193fee39ff1b09fc246a152ee4d0777d145ab12d2f8f835b0623af014a7fd2adc65dd4714e04783932cdaa2ea61a1550b82882f9d98cfaebbd775319d1829fcff6", 0xbe}, {&(0x7f0000000680)="caa9963d57a86d3d869be130b0e5572de12def8345c26fb0de7903f7ed098f7b462b787b1a0ae6a5701a4eae904978fd98849e694630eca97118070775437bdf28fd3f28dcc1f2fe7de0f674c2ac02138ede1ec66fd1", 0x56}, {&(0x7f00000003c0)="d9885ff2eca97464da70e993d28353a5777534c4a4e9fd4e8f416ba1fd67bd871d3540f3599296a969d7774ba29c", 0x2e}, {&(0x7f0000000700)}, {&(0x7f0000000740)="32b0f73cfc8517e4af1f2c", 0xb}], 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x5b4}, 0x40000) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000700)={0xfe, 0x200, 0x7, 0x3, 0x0, 0x3}) 07:19:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r0, r1) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000140)='syz1\x00') ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:19:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000180)="1c49d409abeb8043f0e1c50507d952aa29b8dd7dfb431cef7fb283531a4fc033c3bc1aa9969c1a95e7c77455444029cda9935db2b86843e0837484aad6e2806018fc87c2373ec357b090b21719ede6b18f89b57b3a94f16dfba1ff656f1b37018446330370c4ea442f376dbe5547cdaabd904158cb0ee1bd8298b7ac33654aa337657a186b2177153eff87", &(0x7f0000000300)="ac832ff820b28898d411c4cb7000a50fff9fd8c0dd6f6bf9bbe94d1d28883c0e332b7f5f58b2406c9e2ccbb1164c383543679e93206d5d5747437d6c5ea49d5bb86c39603423c76c7c194e9343a23d586c23ad921a25a89ca23ff270f4612b87ed5084c4e9bdc22e21afb95f6ef28d1f3ba1862c7ca48b6f0a41fe3c69e7132c6f4518afcc1457954e7fe9c2e4015c3544cc14157c6825ac05d4134a", 0x2}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000000}) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) [ 300.006420][T16001] *** Guest State *** [ 300.012932][T16001] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 300.032995][T16001] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 300.083492][T16001] CR3 = 0x0000000000000000 [ 300.088078][T16001] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd 07:19:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfdffffff}, {0xffffffe0}}) [ 300.143468][T16001] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 300.180214][T16001] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 07:19:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) mkdir(0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x4a400295f) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x280, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) [ 300.223994][T16001] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 300.253096][T16001] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 300.346423][T16001] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 300.394558][T16001] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 300.449297][T16001] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 300.484905][T16001] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 300.498783][T16001] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 300.513875][T16001] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 300.522784][T16001] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 300.533601][T16001] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 300.542914][T16001] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 300.550433][T16001] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 300.559039][T16001] Interruptibility = 00000000 ActivityState = 00000000 [ 300.566469][T16001] *** Host State *** [ 300.570430][T16001] RIP = 0xffffffff811b4620 RSP = 0xffff88805c7c7998 [ 300.577571][T16001] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 300.590102][T16001] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 300.600035][T16001] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 300.614723][T16001] CR0=0000000080050033 CR3=0000000099390000 CR4=00000000001426f0 [ 300.629848][T16001] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 300.637764][T16001] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 300.646025][T16001] *** Control State *** [ 300.650266][T16001] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 300.658103][T16001] EntryControls=0000d1ff ExitControls=002befff [ 300.665142][T16001] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 300.672861][T16001] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 300.680283][T16001] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 300.687598][T16001] reason=80000021 qualification=0000000000000000 07:19:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x200, @empty, 0x3}, @in6={0xa, 0x4e23, 0xa5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3e3}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x3b}], 0x54) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x4, 0x0, 0x0) 07:19:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xff000000}, {0xffffffe0}}) 07:19:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000140)={0x7fffffff, 0x4, 0x40}) 07:19:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @multicast2}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@remote, r1}, 0x14) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 07:19:03 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x9, 0xc, 0x7, 0xfffffffffffffbff, 0xfffffffffffff800, 0xffff, 0x72, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @loopback}}, 0x100000000, 0x6}, &(0x7f00000001c0)=0x88) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000680)) r2 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x4, 0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9, 0x146, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7625, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000900)=""/4096, 0x1000) [ 300.695230][T16001] IDTVectoring: info=00000000 errcode=00000000 [ 300.701572][T16001] TSC Offset = 0xffffff5d792e3513 [ 300.706661][T16001] EPT pointer = 0x000000003aa7201e 07:19:04 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xff030000}, {0xffffffe0}}) 07:19:04 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[&(0x7f0000000400)='\x00', 0x0], &(0x7f0000000c80)=[&(0x7f0000000540)='net/ip6_mr_cache\x00', 0x0, &(0x7f0000000ac0)='\xd2vboxnet1security#bdev\x00', &(0x7f0000000b00)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x0, &(0x7f0000000c00)='{\x00', &(0x7f0000000c40)='net/ip6_mr_cache\x00'], 0x1000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x3f, 0x20000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x6001, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) write$binfmt_elf64(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/1109], 0x455) ioprio_set$uid(0x0, 0x0, 0xe3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x0, 0x1}}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x45, 0x0, 0xd, 0xb, 0x8, "83542f7f9be7732b748826c10f95833bc1fd4535646abe70c83723bc4a6e8569753daafede68e8d0b45e859432510c9871701e209a74cb2aa91e5acfc3ab3581", "403150648708364539b537dfbd6288320665d25d90331cbc4f8dcc6f674eb81b7ba51e248f3b06f5bf34bec6a4089f6fecfc2f3bec7866d1c737d15cdcf23c0e", "d8f19577ec9dbf0a4addc84babe4dc5982558c62eadb793e82e1c4909905a2a7", [0x4, 0x2108]}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000040)={0x0, 0xffb700, "e8235c175235a1e2cdd84a4490b2a39e578dfb77ef8bd1d0", {0x1, 0x3ff}, 0xfffffffffffffe01}) 07:19:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) 07:19:04 executing program 0: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x3, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x2}]) [ 300.983871][T16048] *** Guest State *** [ 301.012530][T16048] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:04 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfffffdfd}, {0xffffffe0}}) [ 301.061160][T16048] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 301.115719][T16048] CR3 = 0x0000000000000000 [ 301.121531][T16048] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 301.129655][T16048] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 301.137879][T16048] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 301.150848][T16048] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 301.172766][T16048] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 301.197416][T16048] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x7, {0x0, 0x9}}, 0x20) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 301.219150][T16048] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 301.273590][T16048] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 301.311318][T16048] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 301.338576][T16048] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 301.354432][T16048] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 301.373631][T16048] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 301.423576][T16048] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 301.448030][T16048] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 301.476578][T16048] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 301.529185][T16048] Interruptibility = 00000000 ActivityState = 00000000 [ 301.546749][T16048] *** Host State *** [ 301.550780][T16048] RIP = 0xffffffff811b4620 RSP = 0xffff88806251f998 [ 301.566518][T16048] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 301.581416][T16048] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 301.590087][T16048] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 301.598724][T16048] CR0=0000000080050033 CR3=000000009dc29000 CR4=00000000001426e0 [ 301.607444][T16048] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 301.614970][T16048] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 301.621803][T16048] *** Control State *** [ 301.626100][T16048] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 301.633678][T16048] EntryControls=0000d1ff ExitControls=002befff [ 301.639939][T16048] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 301.647719][T16048] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 301.655134][T16048] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 301.662408][T16048] reason=80000021 qualification=0000000000000000 [ 301.669476][T16048] IDTVectoring: info=00000000 errcode=00000000 [ 301.675676][T16048] TSC Offset = 0xffffff5cf3e3ac7d [ 301.680688][T16048] EPT pointer = 0x00000000a94e701e 07:19:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="85c150f500"], 0x0, 0x5}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe2(&(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:04 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1, 0x7fffffff, 0x2, &(0x7f0000000040)={0x6}, 0x8) ppoll(&(0x7f0000000000)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 07:19:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1000beb2d2b9000000000000"], 0x10}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="24402cfea01186ef74556ca6bbc8021724fcf0fa266615ccfa66cf8887c7767d941a22fe40f0f6ce115a425800758127440e6703a7fb4b0fd81594106487bcf07be9b070071a70b6f9c641f0eacedf5c9f0ab35d8ccc78c25c68bc89491e47f6e2f0b7961847d0abbd48f90c2a46ac1ed8b22c68dcee9212d6db3f83a8c1647fce726b84662b9f02e5eeb3d61429e3d00e873b1cef8c7af21c290028572b8da4aeff8c6b059217b159287c254f9911601c5c69005c9f56289bec093415", 0xbd}], 0x1, 0x2) 07:19:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd0, 0xd0}, 0x0, 0x3fff8000000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:04 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfffffffd}, {0xffffffe0}}) 07:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x2ea, 0x200007fb, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x14d) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 07:19:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1, 0x7fffffff, 0x2, &(0x7f0000000040)={0x6}, 0x8) ppoll(&(0x7f0000000000)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 07:19:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000002c0)=r3) userfaultfd(0x80000) r4 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:19:05 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x100000000000000}, {0xffffffe0}}) [ 301.962746][T16096] *** Guest State *** 07:19:05 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaffffffffffff0800450000300000000000889078ac2314bbac1414000d06907800000000450000000000000000000000ac2314aaac141408000000"], 0x0) [ 302.005331][T16096] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 302.083703][T16096] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1, 0x7fffffff, 0x2, &(0x7f0000000040)={0x6}, 0x8) ppoll(&(0x7f0000000000)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) [ 302.132581][T16096] CR3 = 0x0000000000000000 [ 302.154523][T16096] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 302.226832][T16096] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 302.273470][T16096] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 302.314771][T16096] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 302.355722][T16096] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 302.368833][T16096] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 302.379888][T16096] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 302.392807][T16096] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 302.409276][T16096] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 302.430894][T16096] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 302.440198][T16096] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 302.449315][T16096] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 302.458256][T16096] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 302.467284][T16096] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 302.474493][T16096] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 302.482637][T16096] Interruptibility = 00000000 ActivityState = 00000000 [ 302.489713][T16096] *** Host State *** [ 302.493749][T16096] RIP = 0xffffffff811b4620 RSP = 0xffff88805c1cf998 [ 302.500432][T16096] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 302.507619][T16096] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 302.516151][T16096] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 302.522720][T16096] CR0=0000000080050033 CR3=0000000093ef4000 CR4=00000000001426f0 [ 302.530565][T16096] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 302.537964][T16096] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 302.544794][T16096] *** Control State *** [ 302.548944][T16096] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 07:19:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x2ea, 0x200007fb, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x14d) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 07:19:05 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x200000000000000}, {0xffffffe0}}) 07:19:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) unshare(0x400) pselect6(0x40, &(0x7f0000000000)={0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0x64, 0x0, &(0x7f00000000c0)=0x8}) 07:19:05 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000180)={'syz0', "1cced837ce34fe5b0e15840c5fc5f0b715abfcc3b170418525547fb6a1cc124f93124904617dd4071feadfd85f8b55c0bc63a285e831ae0142c27490c201c686780e1a49849ef84b9bb1046057544858d15731b53672f95f1c6b2fc4791e8c578c08cf3342a992869fb730e3ed469b4eb560"}, 0x76) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x0, 0xffffffffffffffff}, 0xc, 0x2000000}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f00000000c0)="5e7d39ed1f8d54b0ddb27f3f28a096d4e2b7fe0c9889d4719ef600cb24bb46967abd58e09f715e97124299fa290a828dc24edc848182a96c98e289f6057ed8a73a5f368abaddb59e9d08d8888fa786dc74f8377580bc06e68b4fe08d6478b5fb84542eb1cbd7541e2f98f10b33a7a6540b5566226ea6cd8a") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x200000, 0x0) 07:19:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {0x0, 0x8}, 0x8, 0x3}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="2daffb29d4c4b0e2c6614608a67a97c586cb777ea84b3d5de6f175050ae64832aa5b5a58400d7e8e4b42252d4e69be71aed54e25c00ef3be177485098181cc79f5ef8d3c305ba11da29b3de0d97a29d5a6a1e4c57d402d1fc92c70b1b6", 0x5d}, {&(0x7f0000000280)="300466fb6349ed92b4fc6ee6b7d74aa1cddcbfe65fb3ddbfe3f47a9fcf7c0904a2825f937ba40230a671e8b5dc295dd89fdd98b9fb0932c177d649868e9656536ec13820d7fdd2bd848b703729842e", 0xffffffdb}], 0x272, 0x5) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) fcntl$getflags(r1, 0x4287918812ea423b) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 302.556387][T16096] EntryControls=0000d1ff ExitControls=002befff [ 302.562542][T16096] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 302.570225][T16096] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 302.577642][T16096] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 302.585034][T16096] reason=80000021 qualification=0000000000000000 [ 302.592047][T16096] IDTVectoring: info=00000000 errcode=00000000 [ 302.598228][T16096] TSC Offset = 0xffffff5c74a0a848 [ 302.603245][T16096] EPT pointer = 0x0000000085bd501e [ 302.678635][T16133] QAT: Invalid ioctl [ 302.712938][T16133] QAT: Invalid ioctl 07:19:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="2e0000002300817ee45de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3f00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0xa4000) 07:19:05 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x800, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x440, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000180)={0x2, 0xfffffffffffffc00}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bond_slave_1\x00', 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {0xfffffffffffffffe}, 0x8, 0x1}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x428, 0xffff}, {0x800, 0xffffffffffffffc1}, 0x84, 0x4, 0xf4f}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000280)="4688068278a954cdea01") r5 = dup2(r4, r3) ioctl$RTC_UIE_OFF(r5, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) fdatasync(r3) fcntl$setsig(r2, 0xa, 0x23) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) 07:19:05 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x300000000000000}, {0xffffffe0}}) [ 302.762604][T16143] QAT: Invalid ioctl 07:19:06 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0188c2000000aaaaaaaaaa0008004500002000000000d81c0221433f2c105f72afe683f15b0002907800000000ff"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000040)="b6508a09fc670532f9322ee57d593c1bcf0b75c146d665df68bffdb6b696575f38fa0b4cee65112de0b08fc4a8212d71dc4acd34166c03b5ae8d") 07:19:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) poll(&(0x7f0000000100), 0x0, 0x20000fb) close(r0) 07:19:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 302.903067][T16149] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x400000000000000}, {0xffffffe0}}) [ 303.031647][T16148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:19:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003380)=0x14) connect$packet(r0, &(0x7f00000033c0)={0x11, 0x10, r2, 0x1, 0x101}, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x3, 0x0, 0x2000, 0x20000000fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], 0x1f004, 0x485}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x4300, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a45321, &(0x7f0000000240)={{0x9, 0x4637}, 'port1\x00', 0x1, 0x1, 0x40, 0xb3a, 0x6cc, 0x5, 0x4, 0x0, 0x5, 0x101}) [ 303.081777][T16149] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 07:19:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x500000000000000}, {0xffffffe0}}) 07:19:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 303.154346][T16149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:19:06 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r2, &(0x7f0000000000)=""/30, 0xfffffe4c) pkey_mprotect(&(0x7f0000117000/0x1000)=nil, 0x1000, 0x2000004, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$audio(0xffffffffffffff9c, 0x0, 0x4080, 0x0) 07:19:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x600000000000000}, {0xffffffe0}}) 07:19:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000380)={@loopback, 0x0}, &(0x7f00000003c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x148, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r2, @ANYBLOB="000025bd700008dcdf322225cf337f000100", @ANYRES32=r3, @ANYBLOB="7c0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="08f60000", @ANYRES32=r5, @ANYBLOB="3001020054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400d408005900000000060004ff0600000080008e0404000000060000040000201044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000200ff000400000000000803020000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c00040008005004000000000400ff01090000004a000381090000000001090680000000030004e5010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6], 0x1d0}}, 0x4000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r8 = dup2(r7, r0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000280)) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f0000000140)="e79b73c4bea20ada52b73649c4f3c9d6833f3f5c2c8e85aae434033caacf6621e3bb07dfc2dac0d4096832810bd9e492e38071a58bdf9155fa3a08e7fa6f1ab35f") ioctl$RTC_UIE_OFF(r1, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) socket$key(0xf, 0x3, 0x2) 07:19:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x1007d) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/56) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000100)=""/194, 0xc2}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000080)=""/41, 0x29}, {0x0}, {&(0x7f0000000480)=""/169, 0xa9}], 0x6) write$uinput_user_dev(r0, &(0x7f0000001f40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 303.724361][T16202] *** Guest State *** [ 303.732135][T16202] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 303.761024][T16202] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 303.771451][T16202] CR3 = 0x0000000000000000 [ 303.777764][T16202] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 303.785567][T16202] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 303.792578][T16202] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 303.802205][T16202] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 303.823576][T16202] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 303.832583][T16202] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 303.847401][T16202] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:07 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xa2, 0x200c00) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x0, 0x4, 0x80000001, 0x3]}) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0xc, 0x110, 0x9}], 0xc}}], 0x1, 0x0) 07:19:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x700000000000000}, {0xffffffe0}}) 07:19:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x1, 0x5, 0x1, 0x3, 0x8, [{0x8000, 0x80, 0x3, 0x0, 0x0, 0x4}, {0x81, 0x35e, 0x9, 0x0, 0x0, 0x2000}, {0xd6f, 0x5, 0x7, 0x0, 0x0, 0x2}, {0x401, 0x9, 0x7fff, 0x0, 0x0, 0x180}, {0x0, 0x0, 0x80000001, 0x0, 0x0, 0x80}, {0x7, 0x3, 0x9}, {0x4, 0x3, 0xfffffffffffffbff, 0x0, 0x0, 0x2400}, {0xffffffffffffffff, 0x7, 0x2, 0x0, 0x0, 0x2400}]}) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000100)=0x80) ioctl(r1, 0x7, &(0x7f0000000200)="9ab8d33ea3db17955ffbad1473e299fea8c8c3d071b319f9d8e6e1ecab37ce6a3b5c1a9eafc89fc53fd4b7a036ec661a27df926a590d0a4bc7e3bebb1bdc9d5165d40c24de7597d745049d2f29d4fffe094f09c01608014546a97342ac6be8a23ac124e627ff0e0825d52a05121534a703df2863f3e8eca0e9083560ffd361afdb4b96f02f0e7d062b8c406be2df5784c227976978a82e539f447c59c69d80c7336e60f13e4bf70ec5f7f3d510e1fc90615403e3e07419181a0ceecf82c34ed9e629149b40339de25a54c116f8991b15f6f366a4f7e2c5dbe9ca8ab65e5cfa46261f4541d21b7e0c74a2b0c07a02705ff54de40b072e34") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r3, 0x7004) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x4, 0x109000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:07 executing program 0: futex(&(0x7f0000000000), 0x80, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x10241) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, 0xffffffffffffff9c}) [ 303.871876][T16202] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 303.886049][T16202] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 303.904576][T16202] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 303.918640][T16202] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 07:19:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x800000000000000}, {0xffffffe0}}) [ 303.980291][T16202] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 304.018024][T16202] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 07:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000000040)=0x2) ioctl(r0, 0x80001000005452, &(0x7f0000000700)) syz_emit_ethernet(0xbe801f26, &(0x7f0000002140)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0xf0ffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff86, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000000c0)={0x0, 0x0, 0x2080, {0x0, 0xd004, 0x3}, [], "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", "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"}) 07:19:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) [ 304.040621][T16202] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 304.090257][T16202] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 304.149278][T16202] Interruptibility = 00000000 ActivityState = 00000000 [ 304.206905][T16202] *** Host State *** [ 304.219369][T16202] RIP = 0xffffffff811b4620 RSP = 0xffff888096cb7998 [ 304.230845][T16202] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 304.241158][T16202] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 304.257480][T16202] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 304.265721][T16202] CR0=0000000080050033 CR3=0000000098d27000 CR4=00000000001426e0 [ 304.283925][T16202] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 304.303208][T16202] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 304.314738][T16202] *** Control State *** [ 304.319201][T16202] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 304.327748][T16202] EntryControls=0000d1ff ExitControls=002befff [ 304.334597][T16202] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 304.342758][T16202] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 304.351075][T16202] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 304.365960][T16202] reason=80000021 qualification=0000000000000000 [ 304.373646][T16202] IDTVectoring: info=00000000 errcode=00000000 [ 304.380102][T16202] TSC Offset = 0xffffff5b7bf422ac [ 304.385856][T16202] EPT pointer = 0x000000009967901e 07:19:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='bd\xda\xa5_\"\n\x00&ms\xaabev\x84devproctrusted @\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) ioctl(r0, 0x3, &(0x7f0000000080)="e4cdbb8a8cac") 07:19:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0xa, &(0x7f0000000140)=[{0x4, 0x800, 0x8, 0x3}, {0xa209, 0x0, 0x800, 0x1000}, {0x9, 0x2, 0x1, 0x3}, {0xffffffff, 0x5032, 0x2, 0x9}, {0x200, 0x8000, 0x81, 0x12b0}, {0x4, 0x8, 0x8, 0x3}, {0x800, 0x5, 0x10001}, {0x7, 0x165063d4, 0x9f, 0xdf50}, {0x7fff, 0x2, 0x9, 0x80}, {0xfffffffffffffff9, 0xfffffffffffffffe, 0x6, 0x2}]}, 0x8) r2 = dup2(r1, r0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x1f00000000000000}, {0xffffffe0}}) 07:19:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x8, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000300)={0x8, 0x8000000000402, 0x1d, 0x400}, 0xb) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:07 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x20000, 0x0) connect$caif(r0, &(0x7f0000000180)=@dgm={0x25, 0xf5, 0x6}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000000000007000000000080009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xfffffffffffffd9d, 0x0}, 0xfffffffffffffeec) 07:19:07 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0x4000000000000000}, {0xffffffe0}}) [ 304.715155][T16241] *** Guest State *** [ 304.719277][T16241] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 304.814724][T16241] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:08 executing program 0: mknod(&(0x7f00000001c0)='./bus\x00', 0x100c, 0x8) r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x1c1080) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000200)={0x1, 0x9, 0x19, "49c655b09753240337212e06f5bed9b4b3c36f176de981a771e69ee01956ffb0015e6b0a9cb078582e87b2b5e8e58a95c97eba73900c95740bd4178e", 0x2b, "74d29e2d25f6a2fed9c4040e0e1d0dcc7ec2fa3a32e1bcef66c9ffb3074efe42fd47b3977db421d3d50f9f32de66565bc41986a834383611c0ed9758", 0x40}) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0x2, 0x9}) ftruncate(r0, 0x80) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="8efcaed3f098990441dba47cda1aae9d046c56aa3d39014b1e83ffc46ec19cdc40675630bedb0dd54f42a47c40306e710134b4d154092fefd2833fe7d2f7db385a4e40b4399a2f6f432610917a785d3933f5910cb8966fd5bb6bb9e4fd95c8d9eb7cf81df9040b41cb317ccb88e034a175e54b4e0dbd0a1a91c6b1c31b7a77d89ddbb2639b2beccd28010e4f72339bad0c281fd46294f0b21498735b948ee39a89ea60ab9cefa963aa2c71fd71281f1bfdc682c513782845cb558265117c4853836dc4e22849f19920962d17bf78f6f9adb71894eb2c88a9937a817812b26a0497aa0bf5ab056802f39769713b2255c2977322e6b174c1a896", 0xf9, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000440)='}\x00', 0xfffffffffffffff9) keyctl$link(0x8, r1, r2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) [ 304.858242][T16252] *** Guest State *** [ 304.866708][T16252] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 304.888281][T16241] CR3 = 0x0000000000000000 07:19:08 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfdfdffff00000000}, {0xffffffe0}}) [ 304.899910][T16252] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 304.910979][T16241] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 304.928427][T16252] CR3 = 0x0000000000000000 [ 304.934064][T16241] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 304.954657][T16252] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 304.961770][T16241] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 304.970331][T16252] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:08 executing program 1: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) socket$tipc(0x1e, 0x7, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x100, 0x0) fremovexattr(r0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0xfffffffffffffe29) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) mq_getsetattr(r1, 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) [ 305.003619][T16241] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 305.008815][T16252] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 305.012924][T16241] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.060305][T16252] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 305.105941][T16252] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.112898][T16241] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.160859][T16252] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.172492][T16241] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.223232][T16252] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.232496][T16241] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.253620][T16252] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.257099][T16241] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.279542][T16252] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 305.287489][T16241] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 305.298225][T16252] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 305.302484][T16241] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 305.308352][T16252] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 305.316498][T16241] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 305.330192][T16252] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 305.334908][T16241] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 305.343745][T16252] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 305.352465][T16241] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 305.366146][T16252] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 305.368433][T16241] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 305.380173][T16252] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 305.383899][T16241] Interruptibility = 00000000 ActivityState = 00000000 [ 305.391919][T16252] Interruptibility = 00000000 ActivityState = 00000000 [ 305.399222][T16241] *** Host State *** [ 305.410957][T16252] *** Host State *** [ 305.414021][T16241] RIP = 0xffffffff811b4620 RSP = 0xffff888096cb7998 [ 305.415417][T16252] RIP = 0xffffffff811b4620 RSP = 0xffff888062707998 [ 305.421913][T16241] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 305.428571][T16252] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 305.435873][T16241] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 305.463724][T16252] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 305.466877][T16241] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 305.482009][T16241] CR0=0000000080050033 CR3=0000000093990000 CR4=00000000001426e0 [ 305.490105][T16252] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 305.496202][T16241] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 305.501093][T16252] CR0=0000000080050033 CR3=0000000095637000 CR4=00000000001426e0 [ 305.505276][T16241] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 305.515120][T16252] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 305.519942][T16241] *** Control State *** [ 305.533111][T16241] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 305.534795][T16252] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 305.541546][T16241] EntryControls=0000d1ff ExitControls=002befff [ 305.552275][T16252] *** Control State *** [ 305.553822][T16241] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 305.557776][T16252] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 305.565780][T16241] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 305.577682][T16252] EntryControls=0000d1ff ExitControls=002befff [ 305.580756][T16241] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 305.591339][T16252] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 305.594010][T16241] reason=80000021 qualification=0000000000000000 [ 305.601767][T16252] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 305.608950][T16241] IDTVectoring: info=00000000 errcode=00000000 [ 305.621045][T16252] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 305.622538][T16241] TSC Offset = 0xffffff5af684ae7d [ 305.629908][T16252] reason=80000021 qualification=0000000000000000 [ 305.634835][T16241] EPT pointer = 0x000000009894901e [ 305.646601][T16252] IDTVectoring: info=00000000 errcode=00000000 [ 305.667335][T16252] TSC Offset = 0xffffff5ae55b04ab [ 305.672462][T16252] EPT pointer = 0x000000008d72201e 07:19:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:08 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfdffffff00000000}, {0xffffffe0}}) 07:19:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r1, 0x10000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) socket$unix(0x1, 0x0, 0x0) close(r0) 07:19:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000a00), 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000001a80)={{&(0x7f0000000a40)=""/4096, 0x1000}, &(0x7f0000001a40), 0xc}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000180)) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000140)) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@generic={0x2, 0x5, 0x5}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:09 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xff00000000000000}, {0xffffffe0}}) 07:19:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 305.856880][T16294] *** Guest State *** [ 305.884239][T16294] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 305.916931][T16298] *** Guest State *** 07:19:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r0, r2) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) [ 305.926141][T16294] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 305.943723][T16298] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 305.962523][T16294] CR3 = 0x0000000000000000 [ 305.990063][T16294] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 306.044345][T16298] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 306.055518][T16306] *** Guest State *** [ 306.070304][T16294] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 306.081165][T16306] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x83, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) write$input_event(r2, &(0x7f0000000180)={{0x0, 0x2710}, 0x13, 0x0, 0x7fffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)="2bcd49e44f3866db63516fbf2fe02fe112e961d3662c0933673cbb9588e1bcb769b6e989a190d46edbf3ac686a8869d96008cb9438708e099d9f90a8a29fec41453ecfc3848e7da652eefbf10763804a077d4c354d64a0c2e1d77fd8f400", 0x5e, 0x440c0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback, 0x3ff}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000000140)=0x3e7) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:09 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xff03000000000000}, {0xffffffe0}}) [ 306.086096][T16298] CR3 = 0x0000000000000000 [ 306.107120][T16306] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 306.121029][T16298] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 306.124432][T16294] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 306.141250][T16306] CR3 = 0x0000000000000000 [ 306.146168][T16306] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 306.153739][T16294] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 306.162083][T16306] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 306.177592][T16306] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 306.185545][T16294] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.195719][T16306] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 306.214204][T16298] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 306.231337][T16294] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.233948][T16306] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.241712][T16298] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 306.264488][T16294] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.279211][T16294] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.288508][T16298] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 306.303265][T16294] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.303562][T16306] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.328229][T16298] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:09 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xffffffffffffffff}, {0xffffffe0}}) [ 306.338613][T16294] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 306.343548][T16306] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.351868][T16298] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.389042][T16294] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 306.389921][T16306] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(r2, &(0x7f0000000280)='.high\x00\xbf8~\x00bT\x98\x11\xd41\x82)\xcb\x90Z\x99\xbbC?{\xda\xe5v\xf8\xaa\xedv\x81\xd9\xef\xe9\xa9\x13O\xb3\xf7q/{\xc1\xa5\xaa\xaa}\xb52\xec!K', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000180)=""/123) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x80, 0x6}) [ 306.431923][T16294] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 306.434998][T16306] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.469743][T16306] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 306.470682][T16298] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.485331][T16306] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 306.499889][T16306] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 306.509163][T16306] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 306.518315][T16306] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 306.522312][T16294] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 306.549262][T16294] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 306.578136][T16294] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 306.589313][T16306] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 306.599169][T16298] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.609449][T16306] Interruptibility = 00000000 ActivityState = 00000000 [ 306.621070][T16306] *** Host State *** [ 306.625399][T16294] Interruptibility = 00000000 ActivityState = 00000000 [ 306.625436][T16294] *** Host State *** [ 306.625448][T16294] RIP = 0xffffffff811b4620 RSP = 0xffff88804f5df998 [ 306.625470][T16294] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 306.625494][T16294] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 306.625506][T16294] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 306.625520][T16294] CR0=0000000080050033 CR3=000000008f403000 CR4=00000000001426e0 [ 306.625534][T16294] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 306.625546][T16294] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 306.625551][T16294] *** Control State *** [ 306.625560][T16294] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 306.625567][T16294] EntryControls=0000d1ff ExitControls=002befff [ 306.625580][T16294] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 306.625589][T16294] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 306.625597][T16294] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 306.625605][T16294] reason=80000021 qualification=0000000000000000 [ 306.625612][T16294] IDTVectoring: info=00000000 errcode=00000000 [ 306.625619][T16294] TSC Offset = 0xffffff5a570ac8e2 [ 306.625627][T16294] EPT pointer = 0x00000000a17c201e [ 306.635230][T16306] RIP = 0xffffffff811b4620 RSP = 0xffff88805b4f7998 [ 306.681269][T16306] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 306.694895][T16298] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 306.724151][T16306] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 306.758787][T16298] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 306.791365][T16298] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 306.844169][T16306] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 306.855402][T16306] CR0=0000000080050033 CR3=000000009ddec000 CR4=00000000001426f0 [ 306.881266][T16298] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 306.892579][T16298] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 306.901649][T16306] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 306.909570][T16298] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 306.917040][T16306] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 306.923836][T16298] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 306.923847][T16298] Interruptibility = 00000000 ActivityState = 00000000 [ 306.923851][T16298] *** Host State *** [ 306.923863][T16298] RIP = 0xffffffff811b4620 RSP = 0xffff88804dc9f998 [ 306.923884][T16298] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 306.923895][T16298] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 306.923906][T16298] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 306.923920][T16298] CR0=0000000080050033 CR3=0000000092eff000 CR4=00000000001426f0 [ 306.923935][T16298] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 306.923946][T16298] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 306.923950][T16298] *** Control State *** [ 306.923959][T16298] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 306.923967][T16298] EntryControls=0000d1ff ExitControls=002befff [ 306.923978][T16298] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 306.923992][T16298] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 306.933748][T16306] *** Control State *** [ 306.944340][T16298] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 07:19:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffb0}}) 07:19:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x83, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) write$input_event(r2, &(0x7f0000000180)={{0x0, 0x2710}, 0x13, 0x0, 0x7fffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)="2bcd49e44f3866db63516fbf2fe02fe112e961d3662c0933673cbb9588e1bcb769b6e989a190d46edbf3ac686a8869d96008cb9438708e099d9f90a8a29fec41453ecfc3848e7da652eefbf10763804a077d4c354d64a0c2e1d77fd8f400", 0x5e, 0x440c0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback, 0x3ff}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000000140)=0x3e7) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000180)) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 306.949956][T16306] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 306.960952][T16298] reason=80000021 qualification=0000000000000000 [ 306.965650][T16306] EntryControls=0000d1ff ExitControls=002befff [ 306.972904][T16298] IDTVectoring: info=00000000 errcode=00000000 [ 306.984392][T16306] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 306.987390][T16298] TSC Offset = 0xffffff5a536738a4 [ 306.994475][T16306] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 307.003434][T16298] EPT pointer = 0x000000009f3a001e [ 307.006034][T16306] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 307.019934][T16306] reason=80000021 qualification=0000000000000000 [ 307.038892][T16306] IDTVectoring: info=00000000 errcode=00000000 [ 307.186745][T16343] QAT: Invalid ioctl 07:19:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 307.226096][T16306] TSC Offset = 0xffffff5a3ebdf602 [ 307.231322][T16306] EPT pointer = 0x0000000085efa01e [ 307.297478][T16343] QAT: Invalid ioctl 07:19:10 executing program 1: setrlimit(0x7, &(0x7f000000f000)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x8eb, 0x0, 0x0}, 0x2c) 07:19:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffc0}}) 07:19:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x0, 0x3, 0x432e, 0x200, 0x7, 0x1f}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x22000) chown(&(0x7f00000001c0)='./file0\x00', r3, r4) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000000000000000000000004000000000024a26a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5293bdb7b57d98cd4b1ce7ca103118be88121179fe1825ffb5194ce1127508577a022b7a010ab6239748f5a4c94aab16f094b539468edd085df05b07a7290f8d831d165c4b5311a5718daee4fe3e63464a497e5663cded9900aff28577173844de326b9708ffe1505369d504dc4031fefb85cf7c793540f047caf635f244f46d5ad95ba48f02eb22c66f739ecf9bca29664548d43d344272e99edd4ca5f0b2b09a0f282"]) 07:19:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x83, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) write$input_event(r2, &(0x7f0000000180)={{0x0, 0x2710}, 0x13, 0x0, 0x7fffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)="2bcd49e44f3866db63516fbf2fe02fe112e961d3662c0933673cbb9588e1bcb769b6e989a190d46edbf3ac686a8869d96008cb9438708e099d9f90a8a29fec41453ecfc3848e7da652eefbf10763804a077d4c354d64a0c2e1d77fd8f400", 0x5e, 0x440c0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback, 0x3ff}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000000140)=0x3e7) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 307.460089][T16347] *** Guest State *** 07:19:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 307.519159][T16347] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 307.578995][T16347] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 307.629564][T16347] CR3 = 0x0000000000000000 [ 307.661741][T16347] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 307.700529][T16347] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 307.723714][T16347] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 307.749680][T16347] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 307.790290][T16347] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 307.806532][T16347] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 307.820434][T16347] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 307.871535][T16347] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 307.889410][T16347] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 307.905492][T16347] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 307.914887][T16347] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 307.923895][T16347] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 307.932611][T16347] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 307.952050][T16347] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 307.959412][T16347] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 307.968785][T16347] Interruptibility = 00000000 ActivityState = 00000000 [ 307.975827][T16347] *** Host State *** [ 307.979743][T16347] RIP = 0xffffffff811b4620 RSP = 0xffff888058b1f998 [ 307.986551][T16347] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 307.993938][T16347] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 308.002561][T16347] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 308.011379][T16347] CR0=0000000080050033 CR3=00000000a0a2b000 CR4=00000000001426e0 [ 308.019237][T16347] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 308.026758][T16347] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 308.033640][T16347] *** Control State *** [ 308.037855][T16347] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 308.045289][T16347] EntryControls=0000d1ff ExitControls=002befff [ 308.051442][T16347] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 308.059107][T16347] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 07:19:11 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x100, 0x200000) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000002c0)=0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc1105511, &(0x7f0000000040)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000140)) 07:19:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x83, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) write$input_event(r2, &(0x7f0000000180)={{0x0, 0x2710}, 0x13, 0x0, 0x7fffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)="2bcd49e44f3866db63516fbf2fe02fe112e961d3662c0933673cbb9588e1bcb769b6e989a190d46edbf3ac686a8869d96008cb9438708e099d9f90a8a29fec41453ecfc3848e7da652eefbf10763804a077d4c354d64a0c2e1d77fd8f400", 0x5e, 0x440c0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback, 0x3ff}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000000140)=0x3e7) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x240001) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) lsetxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) write$FUSE_STATFS(r2, &(0x7f0000000280)={0x60, 0x0, 0x3, {{0x6, 0x6, 0xfffffffffffffff7, 0x1ff, 0x9b, 0x8d, 0xfffffffffffffffe, 0x7}}}, 0x60) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000200)={0x2, 0x502}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:11 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x2}}) [ 308.066618][T16347] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 308.074702][T16347] reason=80000021 qualification=0000000000000000 [ 308.081717][T16347] IDTVectoring: info=00000000 errcode=00000000 [ 308.087926][T16347] TSC Offset = 0xffffff598796359f [ 308.092947][T16347] EPT pointer = 0x000000009f4f501e 07:19:11 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x3}}) 07:19:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:11 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0xa0000) r2 = dup3(r0, r0, 0x80000) fanotify_mark(r1, 0x8, 0x20, r2, &(0x7f0000000080)='./file0\x00') r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(r4, 0x111, 0x5, 0x0, &(0x7f0000000040)) 07:19:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) mknod(&(0x7f0000000140)='./file0\x00', 0x3000, 0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl(r1, 0x8, &(0x7f0000002180)="caa85b0156d1091e0027476657a69a955b3392a048df962269286f100e807ee3064de7f31f84f0c601a3553cbb8dde042a576deb1db670610f879579994c5e3c1be10b0cae45a8f1815bb21818e169cbff1c0419ea260527c6477a072a581e9d8b4602d5c8b9f124fcae65d9cc98a61985f0e3c40296dbf8abe6ff2f90a127db37411fdc10f7a26348d3ac6ef96f7d0224f0b25559c6d21efbb3db2bc6af3b2d45588abbb67225a15cebf74897cb7534dc3f97a62cb8fc2257b4104f7a603c2a7ea52dff558b4d03350fc808b5b948dd166286fd625afbf666e052eefcd2e6699a9c7c3ab7fb00594c16b2345d47dccf04b0e1fabf3c38cc79b4a33d569a76cd4e774b256540d78f2e5eb4ae1a57bcc4423d2ca8e57d8b79adfe3d4d9cf5f7e7595f528158a5d75eb5bd4d738cbee4de075593bca0b53f38b6305582a2b2c7cbfee6f9234f7144b33554afc3138621299c270d14ada1c7053b2e613db24ed93f4fbf88c5dc793a303db16f04b35ea981b8afe86c1074dae50956b095f85f8f286fb6eb841b1d79ceeb5ca5764da371bcfb0a20f4adc17b3e9fa565b4286ce3506f1ebb3411af61f7ce08fdadde4eb47a8ffd425c05f3a3be1a618b1c1d952ff00e12627b0af923f9c6363ee87dc5eafd0bfd909e5ecf57531a976be9a9b1f87aa5719e31ab339efe12d551801493f090711c0ee422ca6129a7b6ffcc6cce4c6d1fb4b25e1c663c134ff47d35fddf16096f644bb45bca9465f83bc2d828e646cec6c7ff64ed3bd3c16a638780d9b8fbe9b3259f012f1d88003f653b8f9ee24f03c729e2ff8fa878c2c19d6e1609201d58e2bea7a2157863c48e536407577f57ebd1f82963e6b7bfc72c8394b9e34ce33573e15fd0a5729ca359acc27d853241afce9fa208f1003adc895e926b22d763b980dca2083a8b7f895580d63ec3ace08d9e0717cf3956b3fc9a52bd7e959138e26c7338a55b17d6283f490f2806fdec3fc091d20b15f6189f6c7f3a58b5c4afb5e0f2d76511e5f1cedfc666ce8aa5a1223f2adaa1960032a026c605655926b31d6b57c7f8f77e519ab1ee0018304fc036e9fbd7c457486cbe159fff9697e10229adb65ade16198993c85f43f795390a95ae9d63a040a9cdca75c044779271c45d314dc462bee8323aa1bd528353c0229685306056fc2f76d516f19998d67ab153b3a924a23bc874f17764dbc5b17fee6bd02de40de3ed08922243017f5e14449928fea00fe172306dc669d131aeda343d95c563b8757cd05161a71f4f3c6a114904625c43bd3138f10cdfe0351ee9a2619f7900f17a7f3fb4de0444e9c5e4d57db4ac1bc470015bef2afb8f6fcc6fd187a2f439151f954714daae4dc386b07ea4efa9fee27ff0db21f61d1433b744ec1e6bcc76f3828bb4dd2a843db371fb629c2c601f8863113fd2458c7a2ed13d77233b268cd8a7597520a2ae9bdf67e4ca4f332c57dcb8fb06861fa1bb1d2cc7d1113c0f3264d8391250c90648c1bd803715933f3cc26f97fce762e0aaee298aeb6acfd07e70955ce64410f33d6616445193b2931582215e581e8c15be056723e7d1086607410877dcc3e6f49ad8a5c8895ed01be23fd7785200cde41b2a66a5e20a6128638d4bb5339bd14deaaaeaaac4e76234c692d6fe7c10b69c36be318c6dd973e761ebec35f4fa8e7bf5ea553b428420471c166ade43cd07420b9b691dd0a675de10027b30c98873bfb472bcb0a5446901c5de87bb39a1c19c2cd3f5c85f4d4492b1f0e3bacc657f8888370b1bfe6dfb0ed4b07e0215095d00c3005f528801a4442f58de170dd924030b10bf091fe39674cce7ef7e82b569b2d6a2dc53248ae106386cd3d09b73065af971e1db7cb1031374434aca08f2162fd5d2675ea276406ee1d2c2a23723ae67460315dda757c196c876eee7f69833110b6db6d67a3a8e89586ccb8d1c6dbd8bac55e66a4c948762451e5a910ba52329ec3012af5d37fb34bb23e9a542c7c0125cae9b2a031457268b21767defd45823d13d6a0c404917c28bc3c24cd4920250350c38e3e0218298899db460276b5f6a41a76a44a712b2055400037270661109c16aafadb7f9a516edf174ac9e8ff244f1634df0ed3a09ccba3b5b580d9b48e1ec693d071164afa0d56f211babd94460bda721ad7d9ee6fbff4f30bdb7f30ea1ea89e534cf3dadbf09a05a390638d4b473d7809091c2d8d089eb7d36925c64b7755d525af81334e0e8b75caff291901a8db1b5cefae87d7a06f7cfffa7327753e247cec9fbcfd65ff644e401757daf299617408c00e37e4d6e6fcf64079946cef073528026ad66e6661168d1143b0e79a8d81db77c88a4b9c71d586ce2d4ab6ceba9b049c5f17738f62abae68da4a86a0085388795d2e4d596217e5dc200c8958ae781bb9ff3dd2c45ac211a6b60a8c0569d3020b4e8878ad9921590240d60f943e76ff3a2782e95442c7856723e4b2d33281092b7192108a339a6a7486fdddcefdb0d11d7506ecf5f903ad768c4377e9f1ef5abe0854c108cc2a515163a543a4a13e363329ee50312692d738bbf361a3d53a7b5db451cbdc285d023c17af889262f8825d5fac49eae11a6b6d753f9918a6b25b2a73ca5e6d0cc7229147119195298ccb43bf5f6522a85fae40804333a54429956cb9f1305b8d55bf1db9981bb395521607097584a355ded521a704b1d71cdc7760b08b39f523ae203451a9608ea89b49969809c19fd12e8605ef803813e530852c0055f580ab8cdf2093b0cee6e1663e0de5668ac4b850875f5f512d40341befcf62e7d3599103a3d8828ec54163c077cb43c4bcda83324203548374c295597cc2b9eace9b82ed1bb1e3350a7dbcf5313a60e3fad2a1ab6967ca093ae1a5ae84d5bee12fa9321dd0e6a6b146d8bd801d5cd621dd6ae4022cd8175a496e1b4578a76e5a33a0315dc9ed99dc8f885ec005eae815b09af36326fb3b4bee9ec741f765fdec77eda0969b4512034e5fac872371657dc7b55f2e71d0258d2d7c07346495221f1f6a25b43b1d717a61ec439776994785f1da6120f622aaf4ef592bae6b3224867e235b29480ae7e27c07ac327bf8a3fe89c57afe9d495d53524b9a057ae82e7faa310cc118f93d64ce6c80d1d03219664569ceeba4270b964a206afa263c45ca4d71c1bea0f0e3cc4028a1d40b414f15b19ec4755c1e5a95d14e34601e24f7997a2952d33f4830558f512eb00a006f4e1b423f6d99f5cbda2d6a21473145e60c79e512d1356e8e68be4d6cea877799744361e969c158741381b58a7b43c486f132c6a0abbf8b6bd54ecf668c3d147dbe26ee77d50a8fa02a47ae8667b6c4edc24cafc20957fb777cf8aff4255de7ade9090adc4f986f7c6ceae270f14e1d278899fd404ef7452bc6268693dfa08fe5856931ceaa3d778e838240360cfcecf710e32e3716cee53aeb03621a27636d1dc223974241bdfbcade6e715f3dc696cd4a80fb22ca075cffc2f25b968c9d8fe46aeee87bc855493a3783a25290bb11a94c710a1296164e8a3349c1d2bf8e095dcf1749ef8280f12fa1da7d9340a6d0480595a35cf0ecbcced5dfc671e2905276a0fa08c1fe1cd5e03a272f325d361fffff862f376fe2b60621dfae15be2651e9a6cb60c6790f4353e4f372f5cd61e6c6fa9183a5f55980cb6be6db468e2f2c5715c6742a71138adf20822952a8ce3068f122f973d141dd498af8e331638378a822dcca5cb73a926c6b77cb419f9ec5b1b723eaa07ac47e1e5d8c84148ec234c3e8cf72aac05c441b5d93816a960c88973fced74d1422e4d5e8b7228193c6da86c3906b8d072ca9cd40abae558d5e5e9859b0b25e944913e9a7565c11f5d90ba8c098e097b9ed78c27d9ab7aab50e7db571886affa03cfa7b4956fdc806dbd89323ae5d5daa0cbf8610251422f3a5b0b452ae60758dfdc325b61ffdc8bc98a1c82a81ad4f9f7cd560cd6fa531707fd9afd9f33592d76904f45fd4682bf3762f4d54bdf2b0093024cf6c77397d01624d6d7fe0fbdbb0af4b992e226544b46e62ca833ac608f203a4269cba1b4b64b316b5c13f195769c953d06e81b0d96ca93d8e843362571dd71db766e52a3a62b969752207efab9215b90b1aa8e4b5d9072839f5290d5461d348819003170f68534935f6af701e6a4bc8296a2d0a1d97aa7a36be1e46ac47a3c30f2d873d9a4858b4acd3635264d4f29426c5e09fd3b374fc47a1548cf1f703b570d499c74d6003008442bdd92f9eff193ef8f42e975b34e3f31ea357052d27cb7dfd998cfab4e3c2e97651d5741c9f37aa99724f4b9650b372d7e9f0b23389c8a184277f3b9f4355ec4925a46756fc7ca86318f621cf0054349ec26f0df820a33c880226f8e7151f7bce6ec088c647ba68193e49e90b1ac00c74c9d08e6cb1ceed639bb5b5eb94a678602697c6e5bed289f6533bfddbb739b7bfca0107743fb99e078db41e0f7ca92d04b36ac249c3dd3f87150ad850c493004082ce68aad5699dfe9daea217cfce22cb88cef2adf29eb4687b59952e84aa6efc7ad9f131e51ae8ab837fa2ebd8137b59b79227fe24ed5e0810c8a11db100d7799db009af775f0fae91322f727926b36b9c0507c67512130d68be561fa4c6e953b568a98bd31a76d28a6eb4a3d3cc13c1e5e06b2811fda425202b10b19f7a9689d1dedc90c65c884637d7dc99f4f90d238a4884fb47637ff7e04965049afc267539cd6e54cfceea331ac3ab304cb5d5bcf9b21f4ae29bec8385ca3dc4bfa8431a1bbc7a8585cdda9d3d613d9ebbcf22aae54f6e8c2fd7850d5164724e8d6cd0fa0d763733cb1faff99b94ac7db55703baf56cd870793409726fb9b7843ec9fdeaf76364027e9349b6b0920c4aae2212f13c5e8f07e66e87c053d263008a8a515d8181c10652193b6e83c6b05000000b9e15c233ba95c5796a6c5cdc5c195697aecc0ea00f0bdc5443225b2b5a872622df6939422f587279b883471b369ab32bdc78e076eb1ef6b216146816a958dacd98d3d3d2e543fc7493dc97f66f2e0a8a321892381efb112b3b62ba6369763c4df9dc46b3df34fd2278e60b9b41964c9a61b08c4f88b0c84809bf2da978152f3ee45e595c6d7e0eb7ee51b21ee0244fd47913feef370660898610708f2197991e94ff9fd909cd20575cdc78f79e422e971c9ba772e844c16bac7c8cf3c5a479b5f6ae74cd23b06372b8efcd63acd1f9f5c62a0354f913a5cc1b995890cca3aa885cab8039bbccd6ac87f0a99d171aaa96dcd1cabb30d6d3c2238619bdf7a6f2fa87f548777fe8ec1f8e9a81a26581fcfa45af1d36736423dd072e7a6c48f5366b4b199e5873dc4b53694e0abbefed8776a5add1e42798f6610767256edb04cd7ea4ab6b8e6989c36f3d7fb986ab43b7d73862c515c8002ca7f8038f73de72996431d430805cfc49194bf403c8147a4db5ebb9e5e62b2e349bc3ab057e046859b82666c852b4aac3c5a0c8053d5e4f0e82f44cf7d53f77e4d1324d1665f2ac4801ca697f26f134aa95a9a121321e9c2e12f063dc20af6645669f24a912fc875f5221552092ba5bb4b94bf5e1919eb1cafeefb40cc99ce2aaa69d7c9b0da052a7a6ef88394e4795003941d5d72d4064e6c4a4192605bf799763e9e93e3858d63d458c1c3056db185bd1238808584b6477fcf80e2c8c329f88d5ab23470f67cc85a7ffa2779dafb77d963cb0e5feab02e32152be7d90d70725f2140b4a455a01f088b2f43cd9da9620c6c4e9ca35e965561b00366c71e072b521f3042e11cbe5cf55ecfa968fab8d899704543f9c39408c4ba71f6e5f4a9d1d1f150c153ead97ed2f0ac64c18b784262106dda361bb6ce9ea08eebe96290c9f59a6cdf0bf4d39106a479baa88f85f9b7b21e03720caee677054a82e9649c254f8b4e9837bc433f22fc2dfd0e44052e0cc8a777d49e1238f289bac74085da07bce0cb51a7e9b7cdb404ca61231c57886e3d151c25bc1f30770a15573893f9541b292559b4f4cd2e8296dbdb3bde2bd98615004a8dd5a7dbf7db0ae68444cee97c1dcec5fee0058adec5acc8233cc84b69393c8d004f50a3119f3df5a80c58eb128d0d3805551cea8f81bd78cb9ca46530f4bd6b132cae454799140d63638d18c95372d252aaa59a39f8a025e0034fa1bede7fd45d3e47c4d4e11e82d61784e6aecfe8a6b3bbbca0c3c2904f600b5d1e51d42d99a385c695228c45302e13837cb105964174844868da6fd98a540f4fc450e4fe22c7cdcc61eb58e2769f1f18a3a0568b50f3dd8477b047384d30c73efa054919618367018f975ed53e9d9aeaf01c649845055c00e3f421a7fd7a3fa32a") ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:11 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x4}}) 07:19:11 executing program 1: setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000014c0)={0x0, 0xfb, 0x1015, 0x7, 0x7, "00009218c7fa07d000", "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"}, 0x1015, 0x3) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000480)={'ip6erspan0\x00', {0x2, 0x0, @multicast1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb2) syz_open_dev$midi(0x0, 0x7fffffff, 0x1) r1 = io_uring_setup(0x14a, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f00000012c0)=""/221, 0xdd}], 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc010643a, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40040) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 07:19:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305616, &(0x7f0000000340)={0x2}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x40080) 07:19:11 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:11 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x5}}) 07:19:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x44) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r3 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000380)={{0x8, r2, r3, r4, r5, 0x80, 0x1}, 0x0, 0x10001, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r7 = dup2(r6, r0) ioctl$RTC_UIE_OFF(r7, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) 07:19:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x800000000000f26, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000023004708000000f8ffffff0300000000"], 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:19:12 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x6}}) 07:19:12 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:12 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x7fff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffff7b, 0x0, 0x26, 0x0, 0xbc}, 0xc100) getsockname(r0, &(0x7f00000003c0)=@hci={0x1f, 0x0}, &(0x7f0000000440)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@dev={0xfe, 0x80, [], 0x1d}, 0x5b, r1}) r2 = gettid() ptrace$getregs(0xc, r2, 0x199a, &(0x7f0000000100)=""/196) timer_create(0x5, &(0x7f0000000080)={0x0, 0x17, 0x3}, &(0x7f00000000c0)=0x0) timer_delete(r3) write(r0, &(0x7f0000001680)="e6a2e0091b61501ea87850c6d258201cbf3fe9fe75bc31032c1bd695e6f89fffb8dd1bb327cde2fa8115c8949109dddb3332b28603a1e35d08e3d07606314bc0e1cf58b62864f0023821ae335454a2a6d9cc29a3fc3d2c30ff2907f14f80fce3c468ce732418663bbb11e34e1f9e819d012f4928b5fb59fb31755c98649f35c587263cbf7830ddde04ed4e4a9fda1923d06559d4e9df911797333a46b8d2268133da26a6e59e35a66021404ba08e9b550cd132eda9a970ae2ef50b25dbe1c3da78074af2a762c27eeb9b22630beec52475e7a8a159fad88d41e8309b5e32983e315025fbc9c7603d676a5316fffcb42642150cd498d59748ff6200a73c31b403eb73a20b57a47e7d69aa0bb5c59235f2fd893d6b5b86efa9b05a2b566184e4f8a3589d5d5e09337f161517cdcac41b5732064919358d7cd6a9b1fb0a5ad5c4106124da93437fed9f2503223c3eb1103cd9b1a9ecf29674ea86921bd5b0094e3937a1286a44089ef4b42cca8e46cfda355cfe8622e860f416b60af1196f7c0196daa0bf0dd3797d0b8199ac4e2381d92f473393b860c9f97a08324c83c372553042c7f24709106c016ff1e20c93d645e734daaf50f13ad845377b895c1dede9b73432d24c9f6207bc31fe8fb9900377b387f8787f20849ec05b0d44982a78a650e12306efff6f4ef89b0eb175bfff545fda8692314d7fc9e8f4fdffd01b56a6b1358adab6d78f3d693e6781c8bf399024aaa888d572d59cf7cdb74aa974d20549a47624f35caf0956651e8d24079e0866e0172f2fc26af14c628f99051e04e50fba06de938d52d934a78921d5144d18e8c5d1f4fd2d0e7ca22119be065574f5f7dfbabbc44d42b51d62d658ed2ed1250d7821a09d26760bca0f8bc1b186e5cf931377b2adefca5a752c7f9e82224c5734c88d27c3afb7d785ee510fb3806f42bbff9fe9bc1d50cb329bb666a1d766182ffd6b6aee8535406b2a77e2328d90b90950034dd468577693571bc9a9fb9f8aeae67d5a8747f85e38318d97f458c6c9fed9c3b8f0affe63a2adaa57e472449c76b53af7f0cf9087e62bd5556947e681873a002c78d08326290a34489f5eb7acb38367778460473e6b5e4a8c5caa8213092cf59a2f3834548793ef1a55983af67a304c187ded353c4b3f95b9ec569fdc39b60613f8f622a759b7b6a59901d32a2725c7db7768259ad896a7315d07c850035b67dd4ba1ab8be64d2dcf83988b66f3801c26164b3ceb65778e2db97212cac966167ffea65af621e027588b76a23d01995d91e83b6ba104272789f857e75cb959a2206a439d56fd89108d4d6590ac1c6da88cdc53913a51c4b68c17aa26a050d026d6aff72329f597f506280268c61507d62535345d6d2c9e48343825fc36648aa68b2d01c404dfd1dedcba7532f510316d7b18baa8786bd5fa2d1b56c875de3ea88201003b92f6d70ee1e9408cceb561ea511db3a8c85da59390668c486fe1e555b317e767046f69ee031d6021369a01a474bbb3d6f5b094d78745ce3f8ad89e373c18ec3c2dd85af00a79ebaaffb7c049386078bf0b9b56b686c1f0a8855fb1007eb306a68fd840176ff09797edfbace33d4f213ea3599d97d643569ed40a69a41083c65592508305b234587a79aae09645416898a659b17a2c778f5bb2f80878f01f3a14a0488e48fd9d4670cf218b4da04e79c03f77174717e3c25a888bd6286d090000009d281da4bae8d033197171c4fd2503ed398059a78d0ed1fbd98dba8314008ed399ab3ccb56847d30fff2b26a3be5d84af230e1915c2ab7eef4b01b29986985db14213b9b05816ef7724aa896073641a7bc6eb9406e79fa961eb8afbeba75293c1f786e3c8c051733565f40dcfb0f45a036fd01e25be3291f0f5eba9523ba1679a35aebbcfa896ab6401296270ba8742259adaf5a52606c3239b8ecc208e39ee916d09f55e5789d5b08c72984dffb4511ee23cd741a73aba019f14712758376c53649b8ed6f7e4d18", 0x58f) 07:19:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r0, r1) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) inotify_init1(0x800) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 07:19:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) 07:19:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000380)=""/95) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f00000001c0)={0xfff, 0x5, 0x400}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000002c0)={0x5}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0x0, 0x5, 0x5, 0x9000000000000, 0x0, 0x80000001}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:12 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x7}}) 07:19:12 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x2000000001}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x3, 0x7b, "3ff677bab04ee635b22bb6783e961f087ed6068b4d73b5878c360370a14dd3c4813439830d364c4c78d21869e2557b5edf77560227532c2befd493644faa52c836e1fb1c713c1c5fc08bd3db2ffcc5e5d75ebb1ba19c9e1f6657b72321348c210d0674f5685019f0d2a59323c1623a2652b49144fd6a8f760ba9f5"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="8810f10dbabd0b0ef17c2100a9ee45c9ba72f7b5ad5ecff3eab2", 0x1a}, {&(0x7f0000000200)="3aaf41f6d5fb31177f52b7c670ce622773b0a5282a6c0bf4268851a92df14dcf0c84a2544667b3fe533ad472207ade2a77c9d2f21146ca55be0ab219e196583363192e4aa80ba3653b4d7f302097f23fd95a43095250c8f639c27843a882ee48ec7fcb8d3ae03f25b66654", 0x6b}], 0x2, 0x0) 07:19:12 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 309.457057][T16466] *** Guest State *** [ 309.461242][T16466] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:12 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x8}}) [ 309.515898][T16466] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 309.620901][T16466] CR3 = 0x0000000000000000 07:19:12 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x40, "f87d0f2ffff0a225eb07bef35661100c0c20d13ecf0b228ff527c7c980767275"}) open_by_handle_at(r0, &(0x7f0000000080)={0x63, 0x1, "bafab3a1ab0642de0a2d66c8a4e77523e5e0a99c247e6f148768109cc7e5321fc823864f5608e0c52692d4ac719899758c31a1fe7fe4939a865150c73d8235387c7b108b018b1e3033a702e80cb9fd8bd546d76161af81f3e4ad85"}, 0x4000) 07:19:12 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 309.652632][T16466] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 309.674092][T16466] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 309.682747][T16466] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 07:19:12 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x300}}) [ 309.778266][T16466] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 07:19:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, r5, 0x636, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r6 = dup2(r4, r1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80001200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$RTC_UIE_OFF(r6, 0x7004) ioctl(r0, 0xf6, &(0x7f0000000580)="9f54732bd921dab469130adba69d7d769fb3f9bb1412edaa4b7625047477c2826b7f5acdefa27a15c9c379f9d7328cba56434623c1f5b2eabd3bde7c7d24d22d877b10b6383dcbbf41887d17570679f7d2f6d07f6a3b73c2524a40c9b8b022b572a2d8ac5b4baca8d830e0b1aa79c63069c428411ef8efde45caed7080b6a81fe8d39adecaf06f29a9f29d6940f20afd804e6c21bdbd98163563") openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000540)) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:bin_t:s0\x00', 0x1b, 0x1) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) [ 309.823875][T16466] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 309.853606][T16466] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 309.889113][T16466] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 309.908814][T16466] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 309.983803][T16466] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 309.992789][T16466] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 310.076188][T16466] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 310.091116][T16466] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 310.100196][T16466] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 310.114329][T16466] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 310.121464][T16466] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 310.133161][T16466] Interruptibility = 00000000 ActivityState = 00000000 [ 310.141973][T16466] *** Host State *** [ 310.149430][T16466] RIP = 0xffffffff811b4620 RSP = 0xffff8880571bf998 [ 310.158591][T16466] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 310.170972][T16466] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 310.182817][T16466] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 310.194792][T16466] CR0=0000000080050033 CR3=000000009262a000 CR4=00000000001426e0 [ 310.202519][T16466] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 310.214759][T16466] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 310.221626][T16466] *** Control State *** [ 310.226362][T16466] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 310.234008][T16466] EntryControls=0000d1ff ExitControls=002befff [ 310.240254][T16466] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 310.248726][T16466] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 310.256489][T16466] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 310.264246][T16466] reason=80000021 qualification=0000000000000000 07:19:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:13 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x2000000001}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x3, 0x7b, "3ff677bab04ee635b22bb6783e961f087ed6068b4d73b5878c360370a14dd3c4813439830d364c4c78d21869e2557b5edf77560227532c2befd493644faa52c836e1fb1c713c1c5fc08bd3db2ffcc5e5d75ebb1ba19c9e1f6657b72321348c210d0674f5685019f0d2a59323c1623a2652b49144fd6a8f760ba9f5"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="8810f10dbabd0b0ef17c2100a9ee45c9ba72f7b5ad5ecff3eab2", 0x1a}, {&(0x7f0000000200)="3aaf41f6d5fb31177f52b7c670ce622773b0a5282a6c0bf4268851a92df14dcf0c84a2544667b3fe533ad472207ade2a77c9d2f21146ca55be0ab219e196583363192e4aa80ba3653b4d7f302097f23fd95a43095250c8f639c27843a882ee48ec7fcb8d3ae03f25b66654", 0x6b}], 0x2, 0x0) 07:19:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x4, @remote, 0xffff}, {0xa, 0x4e22, 0x9, @ipv4={[], [], @broadcast}, 0x2}, 0x9, [0xfffe0000000, 0xfffffffffffffffa, 0x4, 0xb4ed, 0xc3, 0x5, 0x6, 0xfffffffffffffffd]}, 0x5c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}, 0x45c) 07:19:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x500}}) 07:19:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x800, 0x1) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) r4 = dup2(r2, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000001c0)=0x0) kcmp(r5, r6, 0x0, r2, r4) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) [ 310.271361][T16466] IDTVectoring: info=00000000 errcode=00000000 [ 310.277918][T16466] TSC Offset = 0xffffff586fd6cf2a [ 310.282922][T16466] EPT pointer = 0x00000000933c401e 07:19:13 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 310.387461][T16524] input: syz1 as /devices/virtual/input/input28 07:19:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x600}}) 07:19:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:13 executing program 1: r0 = socket$inet(0x10, 0x2, 0x800000000c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000010407031dfffd946fa283000a200a0009000100040000000c1baba60400817e", 0x24}], 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x100000001, 0x7}) [ 310.500596][T16524] input: syz1 as /devices/virtual/input/input29 07:19:13 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0x3, {0x0}}, 0x18) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xcbc, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x84) [ 310.649842][T16531] *** Guest State *** [ 310.686348][T16531] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 310.781320][T16531] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 310.843851][T16531] CR3 = 0x0000000000000000 [ 310.863840][T16531] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 310.890040][T16531] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 310.898355][T16531] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 310.907363][T16531] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 310.922188][T16531] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 310.931853][T16531] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 310.959840][T16531] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 310.971002][T16531] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 310.980424][T16531] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 310.989414][T16531] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 310.998235][T16531] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 311.006970][T16531] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 311.015943][T16531] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 311.024763][T16531] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 311.031887][T16531] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 311.040177][T16531] Interruptibility = 00000000 ActivityState = 00000000 [ 311.047230][T16531] *** Host State *** [ 311.051436][T16531] RIP = 0xffffffff811b4620 RSP = 0xffff88805c7bf998 [ 311.058279][T16531] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 311.065444][T16531] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 311.074180][T16531] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 311.080821][T16531] CR0=0000000080050033 CR3=000000009869f000 CR4=00000000001426f0 [ 311.088674][T16531] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 311.096165][T16531] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 311.102961][T16531] *** Control State *** [ 311.107294][T16531] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 311.115703][T16531] EntryControls=0000d1ff ExitControls=002befff [ 311.121881][T16531] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 311.129767][T16531] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 311.137409][T16531] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 311.145441][T16531] reason=80000021 qualification=0000000000000000 [ 311.152504][T16531] IDTVectoring: info=00000000 errcode=00000000 07:19:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:14 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x700}}) 07:19:14 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:14 executing program 1: clone(0x4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000040)=0x10001) 07:19:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x7fd\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x8000, 0x8, 0xbbc, 0x8001, 0x0, 0x6, 0x2000, 0x5, 0x7, 0x8, 0x5, 0x0, 0x4, 0x1, 0x6, 0x2, 0x6c, 0x401, 0x100000001, 0x0, 0x406, 0x8, 0x8, 0x1, 0x392, 0x8, 0x3, 0x7, 0x7f, 0x7ff, 0x6, 0x1ff, 0x1, 0x1, 0x79c, 0x3ff, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x9}, r1, 0x7, r0, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) getdents64(r0, &(0x7f0000000540)=""/232, 0xe8) prctl$PR_SET_ENDIAN(0x14, 0x2) 07:19:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xf6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xf2, 0x30}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x200, 0x3, 0x8, r3}, &(0x7f0000000280)=0x10) r4 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) getsockopt$packet_int(r4, 0x107, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$FS_IOC_GETVERSION(r4, 0x80047601, &(0x7f0000000140)) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) [ 311.158902][T16531] TSC Offset = 0xffffff57cf74cc30 [ 311.164019][T16531] EPT pointer = 0x000000009bed001e 07:19:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:14 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x1f00}}) 07:19:14 executing program 0: syz_emit_ethernet(0x18, &(0x7f0000000000)={@link_local, @broadcast, [{[], {0x8100, 0x5acb530, 0xff}}], {@ipv6={0x86dd, {0x0, 0x6, "e7fdd1", 0x4c, 0xffffff88, 0x0, @remote, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x1, [], "42b2629fc89e32d9"}}}}}}}, 0x0) 07:19:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x10001, 0x5, 0x0, 0xe4f, 0x0, 0x11, 0x40000, 0x2, 0x1, 0x100, 0x3, 0x4, 0x810000, 0xff, 0x3, 0x9, 0x36, 0x0, 0x8, 0xd95, 0x8, 0x5283, 0x79f8, 0x1, 0x400, 0x7fffffff, 0x0, 0x7, 0x6, 0x35, 0x1f, 0x9, 0x9, 0x8, 0x400, 0x2, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000140), 0x8}, 0x4000, 0x8, 0x53e, 0x7, 0x7, 0x100, 0x8}, r3, 0x7, r1, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:14 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 311.408814][T16583] *** Guest State *** [ 311.463570][T16583] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 311.502851][T16583] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000000c0)={0x208000005, 0x2, @name="e07289592c588e18e229e1c9aba1b08b2f332cc0abf25ed876de950aaf9a86e0"}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000100)=0x8) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x8001001, 0x8, 0x2}) [ 311.528367][T16588] *** Guest State *** [ 311.539842][T16583] CR3 = 0x0000000000000000 [ 311.543683][T16588] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 311.544704][T16583] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 311.570308][T16583] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 311.582122][T16583] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 311.590381][T16588] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 311.627534][T16583] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 311.655427][T16583] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.674714][T16583] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.676428][T16588] CR3 = 0x0000000000000000 [ 311.707131][T16583] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.723022][T16583] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.749589][T16583] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.749662][T16588] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 311.768286][T16588] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 311.778591][T16583] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 311.790807][T16583] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 311.805790][T16583] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 311.808523][T16588] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 311.819562][T16583] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 311.831475][T16583] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 311.839317][T16588] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 311.848112][T16583] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 311.848135][T16583] Interruptibility = 00000000 ActivityState = 00000000 [ 311.848157][T16583] *** Host State *** [ 311.848210][T16583] RIP = 0xffffffff811b4620 RSP = 0xffff888059b37998 [ 311.848264][T16583] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 311.848292][T16583] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 311.848345][T16583] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 311.858302][T16588] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.869024][T16583] CR0=0000000080050033 CR3=0000000099217000 CR4=00000000001426e0 [ 311.874990][T16588] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.881889][T16583] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 311.891529][T16588] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.903028][T16583] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 311.906996][T16588] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.919279][T16583] *** Control State *** [ 311.923323][T16588] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 311.930746][T16583] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 311.939412][T16588] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 311.951132][T16583] EntryControls=0000d1ff ExitControls=002befff [ 311.955288][T16588] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 311.959409][T16583] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 311.969103][T16588] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 311.980706][T16583] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 311.984886][T16588] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 311.990939][T16583] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 311.999721][T16588] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 312.014462][T16583] reason=80000021 qualification=0000000000000000 [ 312.018652][T16588] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 312.029029][T16583] IDTVectoring: info=00000000 errcode=00000000 [ 312.034618][T16588] Interruptibility = 00000000 ActivityState = 00000000 [ 312.046784][T16583] TSC Offset = 0xffffff57630c2ed7 [ 312.049267][T16588] *** Host State *** [ 312.056338][T16583] EPT pointer = 0x0000000093ff201e [ 312.069917][T16588] RIP = 0xffffffff811b4620 RSP = 0xffff88808b46f998 [ 312.077808][T16588] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 07:19:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:15 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x4000}}) 07:19:15 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) 07:19:15 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000340)=@generic={0x0, 0x2, 0x6}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl(r2, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r0}) r5 = getpid() fstat(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() r8 = fcntl$getown(r2, 0x9) r9 = getuid() fstat(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003900)={0x0}, &(0x7f0000003940)=0xc) stat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003a40)={0x0, 0x0, 0x0}, &(0x7f0000003a80)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000004f80)={0x0, 0x0}) r15 = geteuid() fstat(r2, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005040)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000005140)=0xe8) getresgid(&(0x7f0000005180)=0x0, &(0x7f00000051c0), &(0x7f0000005200)) sendmmsg$unix(r4, &(0x7f0000005280)=[{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000000440)="2434b7ed3adfd908f25afeb9116ace46c22d96fbf66fd8626807a7fcea7b628246ab997f273b5157bd0748709c7d907f8a1c262a3b3529c01c1c1105b9edb0d7725924019c6e40aa04849b4ef1416d6f32db6235da2c178d1caf7c317e8e774e718dc0bf0dd390786e09f53b7e55fcf14038daf5f8f37722ebde6cfbb68af01d50a80d126cc6e7fdd34a91858ee3ce21d0322f9da6e5b656", 0x98}, {&(0x7f0000000500)="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", 0xfb}, {&(0x7f0000000600)="0ca972c968a78e9cb333b1f4530dabc2d7d953a6545ec40554e063b806e3e55b576d292e94bbf2e70ea67ce30b51def7836a8781586e100abcfc6bca098ad7b7ecd8fd023fb854034a689964cb8a97ec373d30950a7d7cb1596e85b90ba7f554f4c138b93f435d317ba8bc6ff6f486aa4607ae5b4bc1814b50bce895d5d381784119617e8af12ab12bc021d585be0fa1aad00f0c8183bcdafcd3e911438a698b404c663aa738be66c3bf1cba8b5d35b6eb07d299662b04d85ec261db9645b2d64f992f4ae8a2b7931df327fe2df3707e841762bae4b421fe7a", 0xd9}, {&(0x7f0000000700)="3244c75a25c38c44d16a4d859c8d3947ad0854b42f61036ffde2862b0d95a92c150a3af38d51156b7051d4e7a08e4f31f22d97e5745a9ab336d8d969fee80edd0ce0295a3e0958e21da3cf52c613ed36487e52ee5092eb7f2a86fc2ac2039e705b2d3cbd637e21127275bfb917ce6931b2075d21497167e0d060888632e70e7f1b21a39be84178a2fa9335fb33a79afd873481067dee1a14f1b731a771a413d692459454a544c056228544f753e97a9762e48fc8106bc5bb21294c7aa5f9067274dd19ffa2492f082ba0efdbd0af7c1195b221f89017a9c569d707d3", 0xdc}, {&(0x7f0000000800)="d9982bf81d58f83362cf7f0001d4d51bf2d510c515ce4e5fa225febb7d22e4cd0257c88fd6d37909f51d867f0bba7c6f595011779008a4ec21586b113e1fb86e7a12660dc6bc63ac88b86322f8c6dc826be6ef9415bdf77620fecfb6dad4bee239af16b2f536c470071308bbf6de6b42ef", 0x71}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="92cab88443e3b90b1baebd4a024669eb9bb4091d969fb05ccc13114ed919d0a8d0da6ee61598203a47ed0f2818a51c75f39a94c554cab8d4b905f41de0c62b637747421d22a37bd9d96ca3232d02d5a6bc2eadd6546c62adaa78949c2e189159ad302fccfcb602cabdcbdfa1b0d17f7b9f0bd5fc1cfd76ea564885b0edb863fd9727786191627b84e309b5059951e0e5e82865c883cb976472c0130dcb3af83c3d22267eebebd6", 0xa7}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="5f8578897b2507f84a43ee6f8f24a3e57e759d024caf2e7edea44e1b0478df8ea282ba0809d72866659bc2f714af14bad027716385c2746a6bcc867413083a6d85f9c8a8f6517a3bb88a3536736f5b4d89b98fa5e3a6c08eacfc7b81ec34ff554d57f84953f635b1d9791754bd8ae4d803d7cd68dc13d51df553710902544475c8d84b16ced09db136904ff8a47691de942cce12a2445d8258802e6a9d3f1df39c78849f63bd123b217073b12012b65e53fd0113eb023db5e5f7673934da9975cae53d3613331f2b7f6c5b161804b39a2606d5ccb81678f656f1cecbaf0b76e040e2b064ddf12f0fcb26a0644f1adb3642", 0xf1}, {&(0x7f0000002a40)="11aaf18e0e7c4273f79c5b9ad30e8ce60fe8aef6bca5432325a44dd84c03347aa9f77225c1ec53ecfb5585517b999497a714d5959b0edea498c714c48a7fe3a2fafc27817def952f24281e55251885faa400e0491f4470f9c428bad6fd63c0b035d3343c6729b4007310584d2e4c77ab495f8a514890424f889ce170", 0x7c}], 0xa, &(0x7f0000002c40)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}], 0x30, 0x4008001}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)="6b19221e5dbdb20af4dc8e94df6548563733e1977f4585e8d0990f3dbf61e6b97077f8c8a8700453d84d7c511746d5c70144630e1636b8528b367cfdd4f181f4f14269cde534e07c528f323f28b578cbfebadba1caba7193d11da8499f305a5621b1a128eb29d7c1222939f0d3529e993b7cfdf98a067cc30925f309204c9a93e0fd14174431c6520309ca0854cc6401ece2e4ec", 0x94}, {&(0x7f0000002dc0)="37e98428f9f574191a5b76ec3bd63dcb7e805699442517f5d7c3cb4ec45b78de69f596ab46c8682b83f2d724b65c83768f11881c3ebd8be10fc47366438cec235e78a4c028d6ed00648d98566dd1b64d493712267eda337e75011ec20196014ec5bb3b00500cf1f8d57b1df61f98384e9d57191552c4ea4f706c3981ff3233dba75d66e591e924", 0x87}, {&(0x7f0000002e80)="834aaf671df6bb791f91b4b351407ae53e899b0c05f35cd407b81a913539724085e3c6cb2872dac2fee89c0f8b4f", 0x2e}, {&(0x7f0000002ec0)="5654cf22eac573b9c86619c12a43b03bf0efd4e9e6f0002c33c14d53ca805cf67e593e63202db3f1f5e9fb4932de7bebe0daebba1547eaa98a4324fc82dd46387a26c235bfd5ce457dc2a5b066380f79c8f3d5614343dc2da84e9e424d651d90f1963348628d6bd442959aaa6970705762f6d8310d7978d43a430edd2cb502d6791fb38405f37fa6b74066dce107284a6e0a436c3542a3e99e855191c3fdc74d488c4106f3b473ec139a8e3380acc279c90c6121529655fd8b88eced6215f228a3512fc3ae14c281278d79028850732903f9b724e0f9f373339824c8b7a9bfa50386c1f8cad3ab848a6ae59f99ce98042eca", 0xf2}, {&(0x7f0000002fc0)="b3db38dfa9bd18595f1f0b28e7639006749b5737ee137c1fbbed1410b312812ddea2024ea7cb6217627692d2703459d2b68a0f69f323340d3af755be26c943b7f97a30430c30d1113322defaf711a30da17e67a65f34a5f0731faf055f5ba2b112640084a5781d7b64f2ea1a93ad47f514618477477ef8996e17beb8dcbf0b0985b6a5c415e73843a4ed6e51edfc54f5179f6bdd5a8fa9700cb317edbd5079d608fd4aaf0c0dcbddcee90c372157cba31fc7cbe394fa6bab1e74b3891ec90d85740b0d31", 0xc4}], 0x5, 0x0, 0x0, 0x20000000}, {&(0x7f0000003100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003180)="54ec17deffd5a553c09cdfbfe5195a114cc4da6c8fe5da83599eb49c0a85242c44411613d53d0f4202e5d202649d63159bec5b06c5cba9ea7feedc88eb9ab5eed47d152ac11fb12d5d8eb0a9fbd962ed8bf46f1342e7ed298b44889338cba67346e5c042398e2a154cd61cc31d4463aef3", 0x71}, {&(0x7f0000003200)="ca2cbd9f8b00324ad4426a4352b906a5c61f837ed0a06603b6ea847ae3657604d582456825cc2d679d67a2602ca0e3daef7d9338f5409546c59a4979f5659617f740e038bd76ac8ec05f1a17bf90ce493ca8129cdfc12aaf02571186b7452d3db0f2104ea44d7a0c55bd7404ec47b2ff0d839a0f804d6f1982d748d1c8af6549bd662c9af0484ea2cbe31bf47b9bda07155692b9031c674452311dcd732a66369184db99d367542026c1fa62399732e4b0fb1a1d26423d39ed9b4822f3928aa255db31c4b6eff86c90981e0fd814b66867e61d403f7c7a6575d9fccbe0fc20675984cec6f0dfb63e22fe61b360b5f768", 0xf0}, {&(0x7f0000003300)="e71dfe7820b700834f32ece847033259fdc1d06086a8bdde3147f7a84b4beff0707bc4dfdc07ed9bca625ee1ed085625f71927d85517330a3f67f776291656af240b271ad533007f05d7be73540e49504ac205aa8869f9a884714b23bce13af7d9b3edb9b9bf91714d3a9e8bc55ae0b5b41b466789e3a74785a6664b8c9953a422b3a5d120847338d9f6d76245ad5479ae7005c5b7987a70b6e887674209c870b151950c648a0427c0e1eaecc8036a4baa596efac2d3fca22a808b1823860b5ae3961d16612df2", 0xc7}, {&(0x7f0000003400)="45ce543b7c9f3ae5f225d13459476796a71ca86c6261a5cfc320311e14a36287e951dceda771656d40c1ce568c4a51b8f7db203dffd78f63d09e9b577d10ae783a21874da6eb2086d19a83a5", 0x4c}, {&(0x7f0000003480)="914800bd8413755ce393d3c5230cd3791ea2fe6d16f5da6f5f574ccb76bddb70477889a30dba848385cad1d42f79209534d70bb91104803a6993ba52a1d973c6ea9700ace2395e9c20dec8c8cdcca89bfdf23beee89eda83dae6378efb2ad5c307414351e4dd5e8554824a1e7468222bea1c6a210edebcc9eee00d6f8827d36479d9b151c3418c6eef064b8a52e1f4661b7f9e5f82ea012d28fe24cdc3a51ce650b033287016062a6b831efc19e5835970aec9c916975aff3111296c1ea1f68b10ff45dbd8d58c", 0xc7}, {&(0x7f0000003580)="0ca7a97c2a1016fcf1d90f98fd51ed1d66ec143a091efd62f1673280617582d4841300735abe7c1e2d6da41898abf6b7f0c55d51e04a46ab1fd28367c31163c40b881fedfe205a1beb5599b6d72b4bdb00645d42", 0x54}], 0x6}, {&(0x7f0000003640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000038c0)=[{&(0x7f00000036c0)="623b08f4d2912d814a2c3fd620d9ec9d39e2b372522429a6b3d3de04df3b37206d81657185acfeef93a53e87ded80e5647bac23f7b97f43822e92f4ca70ad578ac2cd862527ea8892361468177be03c7f009b64070072caa23ec2dc09a138b4e73998fb484fa6565b13f3b809a7ac3b51be2b7e45e", 0x75}, {&(0x7f0000003740)="84db758e0825ca2171d20d02a4616a29c0bc3a621cbbb90da50232aedf577bec637244f32f5184fd244c0ba422193313977e3ffba27f494fe7fa81f0f13bfaeb09e92bf5d17e2abae47c975810a39eda499542b479ff", 0x56}, {&(0x7f00000037c0)="0d191eb7fc1a2d9015ff5b4e22a2a80488963fe1675595c776c357b8fa5ca6ee6c0d1f7900a4a495e0b2f80dc59aa35aada8124fefc541b448871ee2ff6be34501d75f71e340a5bb6cb38c7d0bf9736fd366594e7fecbaeeb391631754971ab44047897e58261d929112557cb8486ead948539fc57073bb0ab8c3c072c8e5a427d0107dc7214dd612e1a5886f8f86c5aab5c5719e3ce1742239910faf9afac2d3c615c802c956358ed2d241f74fd9d9b5370b20e34f9fa98c82d5a6c67ab1fa3bcf1816ac68c5546", 0xc8}], 0x3, &(0x7f0000003ac0)=ANY=[@ANYBLOB="180000fe2258670002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="200000ffff00000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3], 0x48, 0x40801}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003bc0)="422afd10303fbc0c776c91b94fd2f0b64c4ac454592159831fa1068747e4786e3a1d77dec1a886a9ae415fe1b62c367baa619b36c734b1522d8650da3e36f4401d5d377b5c85474d9f46d5da092a1aef7fe3f6b4a5a4cb9a04b4f39df7668ab2d234476a562aad851374a3918eb41988a1f1964b71d49909f35f09a0053b317396314f0e1eaf7c438981ea2027784b311a1c2e93aee7097f1c290897740cfd2eca45575e92ec49036c1be3c715d46441df574c7b1e43ff1250afb78dad550744a076b2a5f2e2c2025edfe1f4d55e1bc00a340d92245b58ec7c31", 0xda}, {&(0x7f0000003cc0)="783ca958c85404f0267a8964a72611cb1bc1d6f91a684a041e11a8bcbccac4757b1405e1a33073a0588f3b9beb9d71c9202ab5d7677609b45258ef1f0eead0b4f2523a06334445454a5d536e288b317c1862a2281e990e36d14b2484f7d7a2962f2b32ab726fb5547f31cc7fbd9b50358d5996e921e5cdbb3eec9ce267bd9931c12576956e4f03d41ea5703e9a94a595042c24552ce2ef7da51a72c6c7bd2aaf71b3846ce6f26eabe3b7d9afafcbbd2c82462be60505", 0xb6}, {&(0x7f0000003d80)="2e69fd78347b843fcde34bce5d751c2d3f2f9cafba1becf1c5469c78dadd978f43513e1dc76f041d01f29c22d54d83fab613f0b1ded1e5334d00b1fb210efc0cc6901aa0027b04cf58ca6d38716eefa588ee4fd51ebcf2d6ec3a46f41cc4b7fe5a7383fd70536b38826cf59dd7", 0x6d}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="c067aabe804cca555c3670d6770cd7b2e86c9fe555933f67b14b464692c2bba129fa6a7c35d692f4c37e6aa9b6f3392aacab73656947453c9d8b26e9ccd9581c3ea732d662cebb8929e3fb82f2f8ae9a990c00095cd0c679cbd97cef9fb8098f90560976b8d63c785609264466fac9d493011df48891b08d58bb126c3d80320b84cc50dd1fbd0d6f51db50db5f73f0bbaad9c0e3c9545d9d2d7286ebf0e83984882de92801ea8a8385dd88514411b0656ff01fce0afb9516909571", 0xbb}, {&(0x7f0000004ec0)="e76e9098e36ce34ffd2714faa7c64fbf360a4f8a03ba9b620ffda07ff255a941eec31d246786313096a9f5e3ffbda25a38e40b147691f7e8b546056c23254aaefe95edf1d832a7c58deca31c2f0bb69a4218eadf8df11b30b8f7cea908066d8910ef08fc7eabe4d9011617ae41b90c45adda07e65da97a4a80", 0x79}], 0x6, &(0x7f0000005240)=[@cred={{0x18, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x18, 0x1, 0x2, {r17, r18, r19}}}], 0x30, 0x4}], 0x5, 0x4000000) geteuid() r20 = dup2(r3, r2) ioctl$RTC_UIE_OFF(r20, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r20, 0xc0045540, &(0x7f0000000140)=0xef8) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x0, 0x6}) r21 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x40003) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r20, 0x6, 0x1, 0xc5d1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$VHOST_RESET_OWNER(r20, 0xaf02, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r21, 0xc0185648, &(0x7f0000000300)={0xbe0000, 0xffffffff, 0xffffffff, [], &(0x7f00000002c0)={0x0, 0x3, [], @string=&(0x7f0000000280)=0x9}}) 07:19:15 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f00000000c0)=""/235, &(0x7f0000000000)=0xeb) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000038, 0x0) [ 312.086726][T16588] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 312.114526][T16588] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 312.121339][T16588] CR0=0000000080050033 CR3=000000008a98b000 CR4=00000000001426f0 [ 312.129569][T16588] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 312.137518][T16588] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 312.168957][T16588] *** Control State *** 07:19:15 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xff00}}) [ 312.281105][T16588] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 312.332701][T16588] EntryControls=0000d1ff ExitControls=002befff [ 312.376485][T16618] *** Guest State *** [ 312.380516][T16588] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 312.380541][T16588] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 312.380580][T16588] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 312.380609][T16588] reason=80000021 qualification=0000000000000000 [ 312.380643][T16588] IDTVectoring: info=00000000 errcode=00000000 [ 312.408179][T16618] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 312.465525][T16588] TSC Offset = 0xffffff574fa8a190 [ 312.471267][T16588] EPT pointer = 0x0000000094dde01e [ 312.495298][T16618] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 312.524590][T16618] CR3 = 0x0000000000000000 [ 312.533992][T16618] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 312.541113][T16618] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:15 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) 07:19:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x50) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x200000) pwrite64(r1, &(0x7f0000000100), 0x0, 0x41) 07:19:15 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xff03}}) 07:19:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x280242, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 312.566200][T16618] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 07:19:15 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) [ 312.655201][T16618] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 312.721788][T16618] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 312.754446][T16618] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 312.772279][T16638] *** Guest State *** [ 312.814057][T16638] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 312.833789][T16618] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 312.852961][T16638] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 312.863802][T16618] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 312.878387][T16638] CR3 = 0x0000000000000000 [ 312.883198][T16638] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 312.908000][T16618] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 312.916983][T16618] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 312.929081][T16638] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 312.930244][T16618] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 312.937437][T16638] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 312.967959][T16618] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 312.968209][T16638] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 312.990788][T16618] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 312.992812][T16638] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 312.999764][T16618] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 313.014539][T16638] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 313.017875][T16618] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 313.030458][T16638] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 313.036410][T16618] Interruptibility = 00000000 ActivityState = 00000000 [ 313.036432][T16618] *** Host State *** [ 313.036475][T16618] RIP = 0xffffffff811b4620 RSP = 0xffff88805efd7998 [ 313.036663][T16618] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 313.050733][T16638] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 313.052516][T16618] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 313.052564][T16618] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 313.057077][T16638] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 313.063434][T16618] CR0=0000000080050033 CR3=0000000090cde000 CR4=00000000001426e0 [ 313.075721][T16638] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 313.079477][T16618] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 313.090628][T16638] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 313.096962][T16618] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 313.108821][T16638] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 313.111895][T16618] *** Control State *** [ 313.120237][T16638] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 07:19:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:16 executing program 0: r0 = socket(0x80008000000010, 0xffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="39000000130009006900000000000000a900804803000000447f0107000000141800290073130000006455c4726e0000000400000306000000", 0x39}], 0x1) 07:19:16 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x1000000}}) 07:19:16 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{}, {0xffffffd0}}) 07:19:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(r2, &(0x7f0000000140)='m\x00\x00\x00\x00\xe8.\x01ig=\xfe', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 313.127209][T16618] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 313.127217][T16618] EntryControls=0000d1ff ExitControls=002befff [ 313.127229][T16618] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 313.127238][T16618] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 313.127246][T16618] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 313.127254][T16618] reason=80000021 qualification=0000000000000000 [ 313.127261][T16618] IDTVectoring: info=00000000 errcode=00000000 07:19:16 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0104307, &(0x7f0000000000)=0x3f) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000016c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001700)={0x0, @multicast2, @dev}, &(0x7f0000001740)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000001f80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002080)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000002180)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000021c0)={'ip6erspan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002200)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000002300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002340)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000002440)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000024c0)=0x14) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000240)={0xcca, 0x57524f5f, 0x2, @stepwise={0x10000, 0xffff, 0x8, 0x9, 0x3ff, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002500)={0x0, @rand_addr, @broadcast}, &(0x7f0000002540)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000002940)={&(0x7f0000002580)={0x3ac, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1b4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xee55}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x50, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xf9, 0x0, 0x977b, 0x8001}, {0x6be4938b, 0x6f, 0x2, 0xffffffffffffffff}, {0x9, 0x5, 0x8, 0xa}]}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2b}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4000}, 0x880) [ 313.127268][T16618] TSC Offset = 0xffffff56deda0997 [ 313.127276][T16618] EPT pointer = 0x000000009829201e [ 313.141641][T16638] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 313.152320][T16638] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 313.280195][T16638] Interruptibility = 00000000 ActivityState = 00000000 [ 313.306088][T16638] *** Host State *** [ 313.312852][T16638] RIP = 0xffffffff811b4620 RSP = 0xffff88805c7bf998 [ 313.320406][T16638] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 313.327830][T16638] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 313.338514][T16638] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 313.408576][T16638] CR0=0000000080050033 CR3=00000000a4f50000 CR4=00000000001426f0 [ 313.433833][T16638] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 313.499108][T16638] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 313.519511][T16638] *** Control State *** [ 313.535834][T16638] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 313.545153][T16638] EntryControls=0000d1ff ExitControls=002befff [ 313.551412][T16638] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 313.566009][T16638] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 313.573928][T16638] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 313.581354][T16638] reason=80000021 qualification=0000000000000000 [ 313.593419][T16638] IDTVectoring: info=00000000 errcode=00000000 07:19:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:16 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x2000000}}) 07:19:16 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{}, {0xffffffd0}}) 07:19:16 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000001bc0)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001c00)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) bind$isdn(r0, &(0x7f0000001c40)={0x22, 0x0, 0xc276, 0x0, 0x7ff}, 0x6) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/157, 0x9d}], 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r2, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r3, r3) ioctl$RTC_UIE_OFF(r4, 0x7004) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001380)=0x0) getresuid(&(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)=0x0) getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001540)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0}, &(0x7f00000015c0)=0xc) getgroups(0x5, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) fcntl$getownex(r2, 0x10, &(0x7f0000001640)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001680)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001780)=0xe8) r13 = getgid() fcntl$getownex(r3, 0x10, &(0x7f00000017c0)={0x0, 0x0}) getresuid(&(0x7f0000001800), &(0x7f0000001840)=0x0, &(0x7f0000001880)) stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgid(0x0) fstat(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000001b80)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000001c0)="470e0cddbeec7c69be69c39642421a9fc5dcd7e7425a83f491fbb16dc71354e5dbb51334aa5b4d13dc743ae1e41d98d4823f8215f22368d033e096f4680ff90e04a74eca2b692cfc0a8341993dc75f1948bb7a42d710e19e4fc60aaceca4827dd72d63c7cc651b20b1cb90f0860b4b62a882f9476623e1cc4f4664414cb7488501f6700fed092199d0b846ffaa7c91c87c49", 0x92}, {&(0x7f0000000280)="72cb26a1d090249cb7c4f4a5e2a409f64459b9865828ab0c30092e638ba011f2818901ce7bfa7468452cb86559ff7537d859d100d001c31d1fd12cf3860acb4aa8fa64895fb23f8eaf44a48c8e6702cad60a1747b4455320f0850dfe38519d7feaa31fb71694a643a358832016534e21072bb8fd8e06457548cd71f38733d089ea4cf68061461257", 0x88}, {&(0x7f0000000340)="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", 0x1000}], 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="980000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="140000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="180000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19], 0x8c, 0x4000000}, 0x4000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:19:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000009) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40100, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) 07:19:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 313.605730][T16638] TSC Offset = 0xffffff56a6fd0b32 [ 313.616462][T16638] EPT pointer = 0x000000009f5a901e [ 313.710027][T16683] Unknown ioctl 19457 07:19:16 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x3000000}}) 07:19:16 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{}, {0xffffffd0}}) 07:19:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 313.970952][T16688] *** Guest State *** 07:19:17 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}}) [ 314.004047][T16688] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 314.043855][T16688] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:17 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x4000000}}) [ 314.065018][T16688] CR3 = 0x0000000000000000 [ 314.080892][T16688] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 314.167480][T16688] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 314.218052][T16688] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 314.238401][T16688] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 314.285730][T16688] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 314.316771][T16688] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 314.330969][T16688] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 314.347739][T16688] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 314.357681][T16688] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 314.368949][T16688] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 314.387397][T16688] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 314.398279][T16688] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 314.409203][T16688] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 314.422043][T16688] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 314.440034][T16688] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 314.448583][T16688] Interruptibility = 00000000 ActivityState = 00000000 [ 314.456506][T16688] *** Host State *** [ 314.460428][T16688] RIP = 0xffffffff811b4620 RSP = 0xffff88805efd7998 [ 314.468429][T16688] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 314.475755][T16688] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 314.484648][T16688] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 314.491277][T16688] CR0=0000000080050033 CR3=0000000059f53000 CR4=00000000001426f0 [ 314.499144][T16688] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 314.506578][T16688] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 314.513529][T16688] *** Control State *** [ 314.517723][T16688] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 314.525264][T16688] EntryControls=0000d1ff ExitControls=002befff [ 314.531476][T16688] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 07:19:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:17 executing program 0: r0 = socket$kcm(0x10, 0x45fa882c97a80b96, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb904021d65ef0b007c05e87c55a1bc000900b8000699030000000b0015000300812fa8000b000f0063e3e558f030035c3b61c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 07:19:17 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}}) 07:19:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:17 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x5000000}}) 07:19:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000140)={0x8, 0x0, 0x1}) [ 314.539183][T16688] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 314.546680][T16688] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 314.554084][T16688] reason=80000021 qualification=0000000000000000 [ 314.561150][T16688] IDTVectoring: info=00000000 errcode=00000000 [ 314.567463][T16688] TSC Offset = 0xffffff5607930ff2 [ 314.572530][T16688] EPT pointer = 0x000000008bc2101e 07:19:17 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}}) 07:19:17 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x38000000000000) r1 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000003c0)="4c0000001300ff09fffd956fa283b700008c0e08000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 07:19:17 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x6000000}}) 07:19:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000140)={0xc029, 0x1}) r3 = dup2(r2, r1) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:18 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:18 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/107) 07:19:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x7000000}}) 07:19:18 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000280)=""/137) io_setup(0x5, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000180)="20818c400a12a4dc0e7379614ffcb0947733cc750c5e05978d47be5f41326bee5b4e6687d71fe2bb15ce339b9252f63e1674b74a16c6003529818cd4160fef4332f6ff986ae4df0b7b0b0dea7b06f4f4e2cffee7e2ec2474108d1e62e8102237552652ee1014f48d957cb116ee3fc2a11df294e3717323b933827f47864a713ea5d664a5b9a3de3c5afa463fa4af29302f", 0x91, 0x7, 0x0, 0x1, r0}, &(0x7f0000000100)) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, 0x0) fsopen(0x0, 0x1) readv(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/146, 0x7fffef06}, {&(0x7f00000005c0)=""/141, 0x8d}], 0x4) 07:19:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x800, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0x2, {0x7a4494a, 0x4, 0x8000, 0x3e}}, 0x20) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r1, r0) write$FUSE_LSEEK(r3, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x5, {0x2}}, 0x18) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) [ 315.091281][T16758] FAULT_INJECTION: forcing a failure. [ 315.091281][T16758] name failslab, interval 1, probability 0, space 0, times 0 [ 315.204103][T16758] CPU: 0 PID: 16758 Comm: syz-executor.4 Not tainted 5.1.0+ #19 [ 315.211799][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.211806][T16758] Call Trace: [ 315.211833][T16758] dump_stack+0x172/0x1f0 [ 315.211860][T16758] should_fail.cold+0xa/0x15 [ 315.234110][T16758] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 315.239934][T16758] ? ___might_sleep+0x163/0x280 [ 315.244805][T16758] __should_failslab+0x121/0x190 [ 315.249765][T16758] should_failslab+0x9/0x14 [ 315.254272][T16758] __kmalloc+0x2d9/0x740 [ 315.258523][T16758] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 315.264248][T16758] ? rcu_read_lock_sched_held+0x110/0x130 [ 315.264267][T16758] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 315.264283][T16758] tomoyo_realpath_from_path+0xcd/0x7a0 [ 315.264295][T16758] ? tomoyo_path_number_perm+0x193/0x520 [ 315.264315][T16758] tomoyo_path_number_perm+0x1dd/0x520 [ 315.264326][T16758] ? tomoyo_path_number_perm+0x193/0x520 [ 315.264342][T16758] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 315.264356][T16758] ? __f_unlock_pos+0x19/0x20 [ 315.264377][T16758] ? __fget+0x35a/0x550 [ 315.264406][T16758] ? __fget+0x381/0x550 [ 315.316749][T16758] ? ksys_dup3+0x3e0/0x3e0 [ 315.321167][T16758] ? fput_many+0x12c/0x1a0 [ 315.325597][T16758] tomoyo_file_ioctl+0x23/0x30 [ 315.330382][T16758] security_file_ioctl+0x77/0xc0 [ 315.335333][T16758] __ia32_compat_sys_ioctl+0xcc/0x620 [ 315.340726][T16758] do_fast_syscall_32+0x27b/0xd7d [ 315.345756][T16758] entry_SYSENTER_compat+0x70/0x7f [ 315.350880][T16758] RIP: 0023:0xf7f00849 [ 315.354934][T16758] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 315.374677][T16758] RSP: 002b:00000000f5cfc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 315.383068][T16758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085112 [ 315.391023][T16758] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 07:19:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x8000000}}) [ 315.398978][T16758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.406927][T16758] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 315.414879][T16758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 07:19:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x1f000000}}) 07:19:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f0000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8805) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x20, 0x2, {0xffffffffffffffff, 0x3, 0x3, 0x1}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x4, @remote}}, 0x5, 0xfffffffffffffff7, 0xd52, 0x62a, 0x2}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x1, @remote, 0x101}}, [0xf48d, 0xffffffff, 0xec4, 0x6, 0x9, 0x40ef, 0x0, 0xfff, 0x5, 0x4, 0x7, 0x8, 0x9, 0x3ff, 0x7]}, &(0x7f0000000480)=0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000004c0)={0x7ff, 0x3, {0x2, 0x3, 0x80, 0x3, 0x1f}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x19) write$binfmt_misc(r0, &(0x7f0000000540)={'syz1', "b660250037329fe3cab6d60edbb14282b37c5cea06c4b654102151954bd9dd3c7aefa91a3d454565b75e79dca08d5102344b414bf7e8f3038ae15633ffe0d9b9ba5ae0564f4ffd32c3363794489e6aa79a842103c28ebd55462f0e943e131bc2c05dafee5c83751afbfde94bde7ab4a3ac4eef55be9b30dd5c3e0d591e4e28ebcf815887679f70567bf06e852eef85e7b12cc2eefc03bdf39f4283fbe88264022ed302882515c56c04bb677f3b12823c61038e2bb9a27a0e63d4073ea6c8df39597d2663b357df0aa8d7c61abc143e1dbb8dafc5094cf4556b95458e2553d66e06340a6552b61ed6471868c5bd0a"}, 0xf2) getsockopt(r2, 0x23, 0x8, &(0x7f0000000640)=""/216, &(0x7f0000000740)=0xd8) setsockopt$inet6_int(r0, 0x29, 0xdf, &(0x7f0000000780), 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000007c0)={0x6, 0x9}) setsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000800)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001880)=0xffffffff, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000018c0)={r3, 0x4}, 0x8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001900)) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000001940)="d941d7665bb826c7b6569e0cf2466d68789b82c2d90e89d3df33627c94425aaace3c81", 0x23) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000001980)) write$P9_RWALK(r0, &(0x7f0000001a40)={0x71, 0x6f, 0x2, {0x8, [{0x40, 0x0, 0x4}, {0x10, 0x1, 0x6}, {0x1, 0x1, 0x3}, {0xc, 0x100}, {0x12, 0x4, 0x5}, {0x22, 0x3, 0x4}, {0x24, 0x4, 0x8}, {0x3, 0x3, 0x3}]}}, 0x71) openat$audio(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/audio\x00', 0x84040, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000001b00)={{0xf7, @rand_addr=0x1, 0x4e20, 0x2, 'sed\x00', 0x8, 0x3f, 0x5c}, {@local, 0x4e20, 0x0, 0x2, 0x9, 0x7f}}, 0x44) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/hwrng\x00', 0x103a00, 0x0) getsockname$tipc(r0, &(0x7f0000001bc0)=@name, &(0x7f0000001c00)=0x10) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000001c40)={0x100000000, 0x6, 0x9}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/snapshot\x00', 0x4000, 0x0) fchmod(r4, 0x10) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000001cc0)="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") 07:19:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:18 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 315.733536][T16758] ERROR: Out of memory at tomoyo_realpath_from_path. 07:19:19 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x40000000}}) 07:19:19 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x50) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000100", @ANYRES16=r3, @ANYBLOB="000828bd7000fbdbdf250300000008000b00", @ANYRES32=r4, @ANYBLOB="04000500080002000000000014000700fe880000000000000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000810) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, &(0x7f0000000300)=@can, &(0x7f0000000380)=0x80, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) [ 315.998479][T16804] FAULT_INJECTION: forcing a failure. [ 315.998479][T16804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.014095][T16804] CPU: 0 PID: 16804 Comm: syz-executor.4 Not tainted 5.1.0+ #19 [ 316.021727][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.031789][T16804] Call Trace: [ 316.035102][T16804] dump_stack+0x172/0x1f0 [ 316.039456][T16804] should_fail.cold+0xa/0x15 [ 316.044065][T16804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 316.049893][T16804] should_fail_alloc_page+0x50/0x60 [ 316.055111][T16804] __alloc_pages_nodemask+0x1a1/0x8d0 [ 316.060509][T16804] ? __lock_acquire+0x54f/0x5490 [ 316.065463][T16804] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 316.071197][T16804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 316.077016][T16804] cache_grow_begin+0x9d/0x650 [ 316.081789][T16804] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.088027][T16804] __kmalloc+0x67c/0x740 [ 316.092306][T16804] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 316.098054][T16804] tomoyo_realpath_from_path+0xcd/0x7a0 [ 316.103601][T16804] ? tomoyo_path_number_perm+0x193/0x520 [ 316.109241][T16804] tomoyo_path_number_perm+0x1dd/0x520 [ 316.114707][T16804] ? tomoyo_path_number_perm+0x193/0x520 [ 316.120349][T16804] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 316.126157][T16804] ? __f_unlock_pos+0x19/0x20 [ 316.130841][T16804] ? __fget+0x35a/0x550 [ 316.134997][T16804] ? __fget+0x381/0x550 [ 316.135018][T16804] ? ksys_dup3+0x3e0/0x3e0 [ 316.135034][T16804] ? fput_many+0x12c/0x1a0 [ 316.135054][T16804] tomoyo_file_ioctl+0x23/0x30 [ 316.135073][T16804] security_file_ioctl+0x77/0xc0 [ 316.135095][T16804] __ia32_compat_sys_ioctl+0xcc/0x620 [ 316.135122][T16804] do_fast_syscall_32+0x27b/0xd7d [ 316.157744][T16804] entry_SYSENTER_compat+0x70/0x7f [ 316.168094][T16804] RIP: 0023:0xf7f00849 [ 316.168110][T16804] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 07:19:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_matches\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000180)=""/58, 0x3a}], 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x20, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x73, "c7cf88ebb429d9203af27fe3cac6a943c5dba05b44b27201d56764bc5c0bbd0bf7946965772865c684930550d4f223f654e934ab1b77cd09799af4f4b84d3c8c18774ae5b34b78bd7bdb8900b2ac5135eed5a6316c84080c923ce3f7d4a42a861cba93fd8bd6b950440017bb7d9d97eb48cb14"}, &(0x7f0000000100)=0x7b) 07:19:19 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:19:19 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xfdfdffff}}) 07:19:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x4, 0xc4, 0x6, 0x0, 0xfffffffffffff800}, {0xfff, 0x7, 0x100000001, 0x5, 0x3, 0x4}], [[], [], [], [], [], []]}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x338) ioctl$RTC_EPOCH_READ(r2, 0x8004700d, &(0x7f0000000140)) 07:19:19 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 316.168117][T16804] RSP: 002b:00000000f5cfc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 316.168130][T16804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085112 [ 316.168139][T16804] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.168147][T16804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.168154][T16804] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 316.168160][T16804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.280042][T16815] FAULT_INJECTION: forcing a failure. [ 316.280042][T16815] name failslab, interval 1, probability 0, space 0, times 0 07:19:19 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xfdffffff}}) 07:19:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:19 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:19:19 executing program 1: setxattr$security_selinux(0x0, &(0x7f0000000400)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getpgrp(0xffffffffffffffff) write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x1}, 0x81}}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200900}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000300000062cbd7000ffdbdf2500000000a4000100a000090000000c00010073616d706c65000034000200080003000010000008000300faffffff0800000200000000000000000005000000740b000000000000580006007a74c26492460bf1d5f4c41a54f83cb177b3f1bcf1e17e8bea5c9f2aceed9a98881f71438802f3cf55ba8636b7408de9c6960eb242c94407be99cff9c4fbe0fb87f1271cfb5ee6ea4ae77b15ef50132e18dc67000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40080) dup(r0) socket$unix(0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x20400, 0x0) listen(r1, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r1, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="e300008950229f030044ce0d0000001000000000382e2c8fbaee16f2a1c2bf15b6fb4e49c45cc6a8b583d99144bca2c49f5d9e340e34587ec18fded0fa7b570489c161d005b74ce2f02a7de34d917ff84a774be30df52a7a17e0db164b8d7ff83f8349406a95f6cbfe911319d51ba6b755dd46d7dc8ad15eb6d16d07340ca5ca1aa6a41e1a5c396b27b4bf561b63389513b8aca03db5eb30ad82a3d776439e67d5229a1226e7aee88067d8a02fc96a00aa793f04074d947d309d387f93f3be0664cd25b777f54a54bd332e85150b3eb4"], 0x14}}, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x3, 0x6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000002c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffffe}, &(0x7f0000000100)=0x8) sendto$inet6(r2, &(0x7f0000001940)="138a3300cf3dac7dfaf9b356d937e1f0d1df07c1", 0x14, 0x24008080, 0x0, 0x0) close(r4) [ 316.321651][T16815] CPU: 1 PID: 16815 Comm: syz-executor.4 Not tainted 5.1.0+ #19 [ 316.329331][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.339392][T16815] Call Trace: [ 316.342715][T16815] dump_stack+0x172/0x1f0 [ 316.347077][T16815] should_fail.cold+0xa/0x15 [ 316.351691][T16815] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 316.357531][T16815] ? ___might_sleep+0x163/0x280 [ 316.362403][T16815] __should_failslab+0x121/0x190 [ 316.367473][T16815] should_failslab+0x9/0x14 [ 316.371981][T16815] __kmalloc+0x2d9/0x740 [ 316.376236][T16815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.382481][T16815] ? d_absolute_path+0x11b/0x170 [ 316.387421][T16815] ? __d_path+0x140/0x140 [ 316.391845][T16815] ? tomoyo_encode2.part.0+0xf5/0x400 [ 316.397225][T16815] tomoyo_encode2.part.0+0xf5/0x400 [ 316.402431][T16815] tomoyo_encode+0x2b/0x50 [ 316.406851][T16815] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 316.412496][T16815] tomoyo_path_number_perm+0x1dd/0x520 [ 316.417964][T16815] ? tomoyo_path_number_perm+0x193/0x520 [ 316.423603][T16815] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 316.429501][T16815] ? __f_unlock_pos+0x19/0x20 [ 316.434199][T16815] ? __fget+0x35a/0x550 [ 316.438377][T16815] ? __fget+0x381/0x550 [ 316.442554][T16815] ? ksys_dup3+0x3e0/0x3e0 [ 316.446980][T16815] ? fput_many+0x12c/0x1a0 [ 316.451412][T16815] tomoyo_file_ioctl+0x23/0x30 [ 316.456182][T16815] security_file_ioctl+0x77/0xc0 [ 316.461125][T16815] __ia32_compat_sys_ioctl+0xcc/0x620 [ 316.461154][T16815] do_fast_syscall_32+0x27b/0xd7d [ 316.461177][T16815] entry_SYSENTER_compat+0x70/0x7f [ 316.461189][T16815] RIP: 0023:0xf7f00849 [ 316.461207][T16815] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.480734][T16815] RSP: 002b:00000000f5cfc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 316.480751][T16815] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085112 07:19:19 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xff000000}}) 07:19:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) [ 316.480760][T16815] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.480768][T16815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.480777][T16815] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 316.480785][T16815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.535972][T16815] ERROR: Out of memory at tomoyo_realpath_from_path. 07:19:20 executing program 0: open(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5be2f9660f3a0fae5e090000ba44d8d1b63ac4817d73d74ec482310d46f449f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfd499768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5c") syz_execute_func(&(0x7f0000000740)="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") 07:19:20 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xff030000}}) 07:19:20 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000004, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000240)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/36, 0x24}], 0x1}, 0x15b}, {{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f00000006c0)=""/128, 0x80}], 0x5, &(0x7f0000000780)=""/220, 0xdc}, 0x100}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000900)=""/37, 0x25}, {&(0x7f0000000940)=""/22, 0x16}, {&(0x7f0000000980)=""/196, 0xc4}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000c40)=""/213, 0xd5}], 0x6, &(0x7f0000000d80)=""/149, 0x95}, 0x37a1fd48}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000001000)=""/130, 0x82}, {&(0x7f00000010c0)=""/224, 0xe0}], 0x4, &(0x7f0000001200)=""/116, 0x74}, 0x1}, {{&(0x7f0000001280)=@nfc_llcp, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001300)=""/49, 0x31}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/104, 0x68}, {&(0x7f00000023c0)=""/46, 0x2e}, {&(0x7f0000002400)=""/191, 0xbf}], 0x5, &(0x7f0000002500)=""/145, 0x91}, 0xcf}], 0x5, 0x10001, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB='qE'], 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000200)="3d81fd8ecad03438cccf64e1ee6b26861e8b814267147852d495ec3026851d3876ae8735c9dee7749b7330c6495a44add8") r4 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000100)=0x1) open(&(0x7f0000002680)='./file0\x00', 0x200000, 0x10) 07:19:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x0) 07:19:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xfffffdfd}}) 07:19:20 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:20 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b802c, 0x1b00) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400000003fd, 0x0) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000000)="c68f3558b9eef2dcab29e7106658b2c3c94827dbfacc92120cc33948b93b71a6583805be6f48", 0x26}], 0x1) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="1b24cd71fd886ff0c23e179960b2b2c07f631b03d8481ab4511c3c6d28af74ca03d736ac194123", 0x27}], 0x1, 0x0) 07:19:20 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10201, 0x3, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) modify_ldt$read(0x0, &(0x7f0000000180)=""/25, 0x19) 07:19:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xfffffffd}}) 07:19:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0xffffffff80000000, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 07:19:20 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3ff}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001100)="04", 0x1}], 0x1}}], 0x1, 0x4008000) close(r1) 07:19:20 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x200401}, {}, 0xb, 0x1}) r2 = shmget$private(0x0, 0x200000, 0x8, &(0x7f0000e00000/0x200000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x5e9600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r3, r1) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x3) shmget(0x3, 0x1000, 0x800, &(0x7f0000e09000/0x1000)=nil) 07:19:20 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x2, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x100000000000000}}) 07:19:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:20 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) syz_execute_func(&(0x7f00000003c0)="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") 07:19:20 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x10, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x48}}, 0x0) syz_execute_func(&(0x7f0000000240)="f2af91cd800f0124eda133fa20430fbafce842f66188d0c4ab5bf9e2f9e2c7c7e4c653fb0fc4014cb63a3af4a95bf9c44149f2168f4808eebce00000802000c863fa43adc4e17a6fe60f186746f340aee47c41730f66400f3833fe8f0f14e7e701fe5ff6e7df660fe7af5cc34a510804f4c441a5609c8ba80000005499") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x803, 0x8000000001) connect$inet6(r1, &(0x7f0000000100), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 07:19:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) syz_open_pts(r3, 0x2202) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:19:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x200000000000000}}) 07:19:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="02000000b5000000000000000000005188adfdb4cc55070002d9f133c0616c072a20139b9ac715e5c07c0227c829273502eb42cd8030f39022e15b9479d77bfc098beef32dc3fabf1cc4ad639e0db270328b9270a90532b371c01c50d9abf9ded461f8319a48bd42008752f1e5b2ccbbc331f3ca01fb8628e59c96f717025bfdf19d6e84829c0f852e5e3cc1c45e7e052f5d943f5bfeeb22320a261fd07f86bc9832852060aa92d7b2005807b4fbd8cfd77942e14ae4e8a990bb4ce7f466aabd0400e133a9462f854753bb2ff779e1de785d7a341549d967739166cacab0413f99ad32fc90166a40566a10776fa7a750701c40ce05bbca9f6c29f0064e4f6ab21a71abcae34042257956be0b061ecbd7c8961fb29584694b909da1296e22388eb80a02cfad60896f173d872e9d9ddd72619beb32f92f0c990c747c21f699b21172812466818058a5e0ce8b050ae4339c14800ff81f7047d2082fc3716b4331f35dbc430c674fba4264249c7624fde64f84d8a9a9bcb796896062cd09b7d96a2d8ccbfe766c8bdc0060e7e136117641adc49f35b74464668b4f45e6c4055b5fa4d0575bbbca4f748e15160ddc27f2c2ad2669d641a075802157f623d1f69a701e97c33a23c9da49ef9e672e7cf911f2b0df219747151345e79cf3fc89b95685d5d1fdbf4be3f95966de393d8820b297241c7f8ebf0d6c6e150051f52281a624920adcf77a23a7a250594808530a4300a9f8a2a4b4e8160ab44bbb39c2a04a7f8caf999295c9ae9387d84dc69804ab8645b709ae40ae86f2714aea27b5be8db0c63134ac6e24ab6b228def10f1c2c7a5c902c0a3798c3f55183ad8f11125bff60055d467078f8a56a5b8ac37ec3f8d229737c36ddfc5aa75b4cb91c88359eca5bd1b55575dd89005117097734371d29c5705628a9532df0e6c18cf997ea65f1cfee2bc7b5a0d8c724a38b292637b3f24824ffca885d2b7cb913062c705c1fc03e54e3267e78720d1970f1f9b708a5db880a9aae70984c35534508a8d3b1f50032e8b345f467e540ee44d4da519e325987345d9b4c1e8375c4dc873032e65c95c6f9346d267a4a33b27f1928ccfc09229a822d9aed875fb7679ca9c2a5238f3ec90644589981a93d30fb52defe208d0cfc7df6bc98a0eab8c0ce55381dbe1dd13fad71ed378f0f0c68c1e7ce7b7cb29ce063141ac1c15ccfcdb3ecebe15ac8c6711f2f3c6f2c8f7f2708ae5a3d55167e5705714df6e265b611f3bd85fcc70a9d8b335d9ecdb02fe392ebfce6076e4e35cbcfaa384f5fab50367ac5bc96c727d6ba9cc8184812ee5f080ed3c351afefe05fdcc6dc1853f402887cb48abb1d3c2122cb2136e13c804aa294e746f2f547b3f6709eaa98be56d70556fb9c8572820e718e376b39fe2eef0e2ff4e00f9c7fb506316"], 0x3f1}}, 0x0) syz_execute_func(&(0x7f0000000100)="40ddb80000000091930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a900fbab7bab7baaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") 07:19:21 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x300000000000000}}) 07:19:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4b3b, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:21 executing program 1: r0 = socket(0x1, 0x1, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x100000133) tkill(0x0, 0x0) 07:19:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r3, 0x10}) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) mq_open(&(0x7f0000000140)='lo\x00', 0x1, 0x0, &(0x7f0000000180)={0x6, 0x5, 0x2, 0xfffffffffffff801, 0x4, 0x7, 0x6, 0x9}) ioctl$RTC_EPOCH_READ(r2, 0x8004700d, &(0x7f0000000240)) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:21 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x400000000000000}}) 07:19:21 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) syz_execute_func(&(0x7f0000000440)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5bf9e2f9660f3a0fae5e090000ba023c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa420f383c02c401405c6bfd49d768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") syz_execute_func(&(0x7f00000006c0)="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") ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) 07:19:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="38b6896da1f06ac9c25b85b27e0d4725c35cca48ad37b116c50a15e2a6b5fffffffffffffffc114422c825ac8c4810b5c3544340dcf0ed2fa314b84822bfb4aa1bef3831d264d04a81990ae8e6c00db245572d3d274afa5672a2cd4681e0870871e212e05bc228b74ebab1406f3549996c983116a1db4e6f283e8fb64c10a06d5cc0800000000000", @ANYPTR, @ANYPTR], 0x98}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000180)="f2af91cd800f0124eda133fa20430fbafce842f66188d0efab5bf9e2f905c7c7e4c653fb0fc48f68b4a2319c3af4a95bf9c44149f2168f4808eebce00000802000c863fa43adc4e17a6fe6450f01eee47c7c730f66400f386033338f0f14e7e7c401fc52e95ff67de7baba0fe7af5cc34a51c441a5609c8ba80000005499") 07:19:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4b48, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:21 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(r3, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:21 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x500000000000000}}) 07:19:21 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:21 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4b70, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:21 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x600000000000000}}) 07:19:22 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) readahead(r0, 0x0, 0x0) 07:19:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = msgget$private(0x0, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) getgroups(0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0xee01, 0x0]) fcntl$getownex(r2, 0x10, &(0x7f0000000400)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r0, 0x0, 0x2f, &(0x7f0000000440)='GPL:$posix_acl_access):keyring-@)/bdevppp1eth1\x00', 0xffffffffffffffff}, 0x30) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x57, r4, 0x0, r5, r6, 0x81, 0x1}, 0xffffffffffffffff, 0x0, 0x8, 0x3ff, 0x2, 0x2, r7, r8}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r9 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r9, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r9, 0xaf02, 0x0) 07:19:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:22 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4c01, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x24e}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5be2f9660f3a0fae5e090000ba44d8d1b63ac4817d73d74ec482310d46f449f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfd499768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5c") 07:19:22 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x700000000000000}}) 07:19:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000300)=""/11, 0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = memfd_create(&(0x7f0000000140)='\'\x00', 0x3) write(r3, &(0x7f0000000380)="c2", 0x1) sendfile(r2, r3, &(0x7f0000000240), 0x9) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r3, 0x409, 0x8) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) 07:19:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(r2, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:22 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4c06, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:22 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x800000000000000}}) 07:19:22 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5100, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x100000001, 0x20200) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x80, {{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r4 = dup2(r3, r1) ioctl$RTC_UIE_OFF(r4, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 07:19:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="38b6896da1f06ac9c25b85b27e0d4725c35cca48ad37b116c50a15e2a6b5fffffffffffffffc114422c825ac8c4810b5c3544340dcf0ed2fa314b84822bfb4aa1bef3831d264d04a81990ae8e6c00db245572d3d274afa5672a2cd4681e0870871e212e05bc2", @ANYPTR, @ANYPTR], 0x76}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000180)="f2af91cd800f0124eda133fa20430fbafce842f66188d0efab5bf9e2f905c7c7e4c653fb0fc48f68b4a2319c3af4a95bf9c44149f2168f4808eebce00000802000c863fa43adc4e17a6fe6450f01eee47c7c730f66400f386033338f0f14e7e7c401fc52e95ff67de7baba0fe7af5cc34a51c441a5609c8ba80000005499") 07:19:22 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x1f00000000000000}}) 07:19:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:22 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5101, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x8, 0x48000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xf2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180), 0x4) 07:19:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="f5ce8d4f7e89bce557b241e39b1c141f5ee144846315b63eafeb067addaecda0bc2328c78b2760f00974ca02e7845fcd93604a50", 0x34}], 0x1}}], 0x1, 0x0) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000180)="f2af91cd800f0124eda133fa20430fbafce842f66188d067f2412d00000000e1801c65ab39ff5bf9e2f9d7c442d1b6265e090000bac7bae4c6d18f26088f65240000dbc46440983af4ad5f48140e660f76cc433d0020d76ec863fa43c4a19b5da200800000f043835a00a9f340ae65657c7c730f8052043822de0ff8a10000000026460f740346d9f880ba0000000083fee7df0804f4c441a5609c8ba800000054838b") 07:19:22 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0x4000000000000000}}) 07:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xb4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0xb4}}, 0x0) syz_execute_func(&(0x7f0000000280)="f2af91930f0124eda133fa20430fbafce842f66188d027430fc7f314c1ab5bf9e2f9660f3a0fae735e090000baba3c1fb63ac4817d73d74ec482310d46f449f216c863fa438036a91bdbae95aaaa11420f383c020201405c6bfd49d768d768f833fefbab6464660f38323c8fc481e5eb85ee000000a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5cc100") 07:19:23 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5111, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xfdfdffff00000000}}) 07:19:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40402, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f00000001c0)={0x9c0000, 0x1000, 0x1000, [], &(0x7f0000000180)={0xb9096f, 0xffffffff80000001, [], @value=0x100000000}}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x4, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xfdffffff00000000}}) 07:19:23 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5402, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="f5ce8d4f7e89bce557b241e39b1c141f5ee144846315b63eafeb067addaecda0bc2328c78b2760f00974ca02e784", 0x2e}], 0x1}}], 0x1, 0x0) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000180)="f2af91cd800f0124eda133fa20430fbafce842f66188d067f2412d00000000e1801c65ab39ff5bf9e2f9d7c442d1b6265e090000bac7bae4c6d18f26088f65240000dbc46440983af4ad5f48140e660f76cc433d0020d76ec863fa43c4a19b5da200800000f043835a00a9f340ae65657c7c730f8052043822de0ff8a10000000026460f740346d9f880ba0000000083fee7df0804f4c441a5609c8ba800000054838b") 07:19:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x420c0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xff00000000000000}}) 07:19:23 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5404, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfe61) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @mcast1={0xff, 0x15}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xfffffd11, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) socket$pppoe(0x18, 0x1, 0x0) 07:19:23 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xff03000000000000}}) 07:19:23 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5409, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) r3 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r3, 0x7004) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f00000005c0)=""/118, 0x76}], 0x7, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0x5, 0x9}) fsetxattr(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="747275737465642ee90200005f7c79706500"], &(0x7f00000001c0)='/dev/dri/card#\x00', 0xf, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 07:19:24 executing program 0: mknod(&(0x7f00000001c0)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x8, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0), 0x16) 07:19:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0, 0xffffffffffffffff}}) 07:19:24 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x541b, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0xaf02, 0x0) 07:19:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000140)="83e0365f54bab7e1a8ba25b5658aae07432f72c7d8233927377900a6271de26eb587d7eecc5ee4c559a95f7028e0e1db") r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x2}) 07:19:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000107, 0x0, 0x2ff], [0xc1]}) 07:19:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x3}) 07:19:24 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5421, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) times(&(0x7f0000000140)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x05\x00\x06\x04\x00\x00\x00\x00\x00\x00\x00b\x00', 0x6}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x0, r1}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x882200}) 07:19:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140)=0x3, 0x4) ioctl(r1, 0x0, &(0x7f00000001c0)="b9c324c248887baa2d60d4ceffc1b4c07994e965a661f67ed1a0012ccabcf081200200000000000000205e184636379138f055fa33") r4 = dup2(r2, r1) ioctl$RTC_UIE_OFF(r4, 0x7004) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000180)=0x10f000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) [ 321.384123][T17155] *** Guest State *** [ 321.395320][T17155] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 321.450529][T17162] kvm [17161]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.480965][T17155] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 321.516423][T17155] CR3 = 0x0000000000000000 07:19:24 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5428, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x4}) [ 321.543973][T17155] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 321.581965][T17155] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:24 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="72617700000000000000000041abb513000f00000004f6de18f90f8aa581676a59e9f03d67ac501c27c1aedf7466f7bcc56d4cb5e4ad5e9885f246472b0254bf80b141954ae3eee28ea8e4c3a2b9ed0c441ee9dcefa8d2a93610ebd3da932c483bce8119909d16ffbdea8e2115d629712725bd1a329602dff779299053656f076c056e8cc4d3d4d4cad0079cd3e7863770a294cf9d189b4af2ef030000001df42fe26c0383eab7ee2199ff2615801cf6a62d22bf341f13"], &(0x7f0000000080)=0x33) sendmmsg(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000400)="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", 0x5eb}], 0x1}}], 0x2, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) socket$l2tp(0x18, 0x1, 0x1) [ 321.612527][T17155] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 321.651062][T17155] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 07:19:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) fcntl$dupfd(r1, 0x406, r2) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) fcntl$addseals(r2, 0x409, 0x3) keyctl$revoke(0x3, r3) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 321.682569][T17155] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 321.762723][T17155] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:25 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x5}) [ 321.806907][T17155] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5429, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 321.851431][T17155] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 321.876626][T17155] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 321.936387][T17155] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 322.019562][T17155] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 322.070924][T17155] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 322.103795][T17155] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 322.112629][T17155] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 322.132173][T17155] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 322.188329][T17155] Interruptibility = 00000000 ActivityState = 00000000 [ 322.198110][T17155] *** Host State *** [ 322.202215][T17155] RIP = 0xffffffff811b4620 RSP = 0xffff888060a0f998 [ 322.216957][T17155] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 322.224499][T17155] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 322.233045][T17155] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 322.239731][T17155] CR0=0000000080050033 CR3=00000000a90da000 CR4=00000000001426e0 [ 322.247517][T17155] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 322.254951][T17155] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 322.261707][T17155] *** Control State *** [ 322.265895][T17155] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 322.273256][T17155] EntryControls=0000d1ff ExitControls=002befff [ 322.279469][T17155] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 07:19:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:25 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x400400, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000080)=0x1412) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0104307, &(0x7f00000000c0)=0x800000) 07:19:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) openat$cgroup_int(r2, &(0x7f0000000280)='notify_on_release\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 07:19:25 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x6}) 07:19:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5450, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xbb) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae91, &(0x7f0000000080)) [ 322.287256][T17155] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 322.294708][T17155] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 322.301979][T17155] reason=80000021 qualification=0000000000000000 [ 322.309209][T17155] IDTVectoring: info=00000000 errcode=00000000 [ 322.315388][T17155] TSC Offset = 0xffffff520b674b8c [ 322.320389][T17155] EPT pointer = 0x000000003a84d01e 07:19:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5452, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:25 executing program 3: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x418, 0x44000) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) bind$inet(r0, 0x0, 0xc8) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[], 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000100)={0x40, 0x8, 0xbd, 0xbfc8}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000a2afe3)="b63db85e1e8d020000000000003ef0011dcc606aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) 07:19:25 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x7}) 07:19:25 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000000000000, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) [ 322.592739][T17223] *** Guest State *** 07:19:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5460, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 322.628484][T17223] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:25 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6ae1}) [ 322.689988][T17223] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 322.713842][T17223] CR3 = 0x0000000000000000 [ 322.726500][T17223] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 322.774557][T17223] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 322.839920][T17223] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 322.884080][T17223] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 322.928457][T17223] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 322.939275][T17223] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 322.958942][T17223] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 322.980453][T17223] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 322.995645][T17223] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 323.005616][T17223] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 323.014642][T17223] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 323.023492][T17223] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 323.032206][T17223] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 323.041734][T17223] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 323.049191][T17223] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 323.057979][T17223] Interruptibility = 00000000 ActivityState = 00000000 [ 323.065054][T17223] *** Host State *** [ 323.068967][T17223] RIP = 0xffffffff811b4620 RSP = 0xffff88804baf7998 [ 323.075791][T17223] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 323.082967][T17223] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 323.091560][T17223] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 323.098220][T17223] CR0=0000000080050033 CR3=000000008d36e000 CR4=00000000001426e0 [ 323.106070][T17223] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 323.113534][T17223] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 323.120299][T17223] *** Control State *** [ 323.125522][T17223] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 323.132939][T17223] EntryControls=0000d1ff ExitControls=002befff [ 323.139219][T17223] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 323.146945][T17223] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 323.154472][T17223] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 323.161788][T17223] reason=80000021 qualification=0000000000000000 [ 323.168896][T17223] IDTVectoring: info=00000000 errcode=00000000 [ 323.175165][T17223] TSC Offset = 0xffffff51665e4e32 [ 323.180214][T17223] EPT pointer = 0x000000008add901e 07:19:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000700)={@remote, 0x1, r2}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000080)={@initdev}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="e079afbe3426079e4d3a293cc8c6f048"}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x3c, "8fee8a29500523240c50151051434e4662f07a84d8327b051845e87c8cb95d30b05b4ba6c159111a2069276174a9774b7ef620403104d4de7876e5f0"}, &(0x7f0000000100)=0x44) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000200)={r4, 0x100000001}, 0x8) 07:19:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x0, 0x10400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000005c0)={0x8, 0x7, 0xfff, 'queue0\x00', 0xc88a}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000002c0)=0x5) ioctl$UI_SET_PHYS(r0, 0x4004556c, &(0x7f0000000100)='syz0\x00') r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180)="00bd0081f4", 0x5, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r2, r2}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000700)={&(0x7f00000001c0)={'sm3\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfc\x00'}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x88, r4, 0x402, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x10) 07:19:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x8}) 07:19:26 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x6364, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:26 executing program 0: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x450, 0x0, 0x118, 0x118, 0x36c, 0x36c, 0x36c, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x9, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @remote, 0xffffffff, 0x0, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, 0x3, 0x3, 0x0, 0xb9, 0xce7, 0x8, 'bcsf0\x00', 'ipddp0\x00', {}, {0xff}, 0x0, 0x104}, 0xf0, 0x114}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xffff}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x49c) 07:19:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:26 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x7002, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x300}) 07:19:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0xffffffbf, 0x28e, 0x98, 0x103, 0x1, 0x2, [], 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0xfffffffffffffdf4) r0 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x7fff, 0x4000) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)={0x9, 0x7, 0x80000000, 0x7, 0x16, 0x80000000000000, 0x57d, 0xff, 0x0, 0x7fffffff, 0x5, 0x8000}) syncfs(r0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000002c0)={0x3, 0x4, 0x1, 0x6, 0x3bd26686}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) write$vhci(r1, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "3779dbdd976236d214c29e4cb9f11a5675e2b9901b40f25e0e9aa5375311622e2241ced04df5be6bb7d8a28ae44dcd95c572d2f1f9132c182d1f3615ebda3e912d1df31b001e2d55f0aff1f5cce3d3937a1cb6309b2ae177ca117dc3f8653ed0954b2c9c8a158b54c7a72b29a33cb3e28f7e017609c9605abfee98533b8fbe63d6f474f58f5cee6f3cd597408d8f4f53ddb13c2e303f5ebad94b967eb22fe6484f6b5c4c5aa41ad6e048c52d99d180920cce3f4992861839b1654e918a17c5c000ee1655ee465aa776fe6979ac4fefc476789a1dc183c826ed2846fa6db985b6af0345af805b3558573822af0ee9"}, 0xef) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x402) mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x800000000131, 0xffffffffffffffff, 0x0) [ 323.488359][T17266] *** Guest State *** [ 323.523724][T17266] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:26 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8904, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 323.587785][T17266] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:26 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x500}) [ 323.638847][T17266] CR3 = 0x0000000000000000 [ 323.654154][T17266] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 323.677134][T17266] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 323.701216][T17266] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 323.744395][T17266] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 323.788445][T17266] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 323.803872][T17266] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 323.838102][T17266] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 323.868043][T17266] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 323.888046][T17266] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 323.897575][T17266] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 323.906974][T17266] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 323.916011][T17266] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 323.925674][T17266] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 323.934469][T17266] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 323.941625][T17266] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 323.949990][T17266] Interruptibility = 00000000 ActivityState = 00000000 [ 323.957109][T17266] *** Host State *** [ 323.961103][T17266] RIP = 0xffffffff811b4620 RSP = 0xffff88805af17998 [ 323.967937][T17266] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 323.975105][T17266] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 323.984654][T17266] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 323.991321][T17266] CR0=0000000080050033 CR3=000000009577c000 CR4=00000000001426f0 [ 323.999276][T17266] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 324.006984][T17266] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 324.013898][T17266] *** Control State *** [ 324.018147][T17266] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 324.028140][T17266] EntryControls=0000d1ff ExitControls=002befff 07:19:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(0x0, 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6b, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2ff}, 0x48) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000140)=r0) getpeername$netlink(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 07:19:27 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8912, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:27 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0x18) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xb3) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r2 = socket$rxrpc(0x21, 0x2, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x3}}, 0x24) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x80000001, 0x6ab, @dev={0xfe, 0x80, [], 0x25}, 0xd17}}}, 0x84) 07:19:27 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x600}) [ 324.034438][T17266] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 324.042092][T17266] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 324.049588][T17266] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 324.056922][T17266] reason=80000021 qualification=0000000000000000 [ 324.064097][T17266] IDTVectoring: info=00000000 errcode=00000000 [ 324.070269][T17266] TSC Offset = 0xffffff50ef83e55f [ 324.075387][T17266] EPT pointer = 0x00000000a09ce01e 07:19:27 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8932, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) 07:19:27 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x700}) 07:19:27 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8933, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000009) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x5}, 0x20) 07:19:27 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KDDELIO(r1, 0x4b35, 0x100) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000140)={0x5, 0x0, 0x4, 0x2, {r2, r3/1000+10000}, {0x5, 0xf, 0x80, 0x9, 0x100, 0x8001, "c6051f70"}, 0x0, 0x2, @offset=0x30, 0x4}) [ 324.545158][T17331] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 324.659458][T17333] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined. 07:19:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(0x0, 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x1f00}) 07:19:28 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8946, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:28 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$rds(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/68, 0x44}], 0x3, &(0x7f0000001600)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x9}, &(0x7f00000001c0)=0x100000001, &(0x7f00000015c0)=0x76b6, 0x1, 0x5, 0x7db, 0x2, 0x2, 0xea}}], 0x58, 0x4000080}, 0x20000050) 07:19:28 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8953, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x4000}) 07:19:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0xffffffff00000000, 0xd4, &(0x7f0000000000), 0x4) 07:19:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(0x0, 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:28 executing program 1: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x23aaaac) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') clone(0x1100108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file1\x00'}, 0x10) [ 325.229622][T17352] *** Guest State *** 07:19:28 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8991, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 325.253480][T17352] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xff00}) [ 325.308396][T17352] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 325.342584][T17352] CR3 = 0x0000000000000000 07:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4f680b020, 0x10000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ef"]}, 0x18}}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x25) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/163) [ 325.393786][T17367] *** Guest State *** [ 325.398074][T17352] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 325.419817][T17367] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 325.444230][T17352] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:28 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x9371, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 325.487112][T17352] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 325.487162][T17367] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 325.502891][T17352] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 325.532253][T17352] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.544505][T17367] CR3 = 0x0000000000000000 [ 325.549186][T17367] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 325.563619][T17352] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.572424][T17367] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 325.572459][T17352] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.585260][T17367] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 325.603647][T17367] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 325.614774][T17352] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xff03}) [ 325.632613][T17352] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.688856][T17352] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 325.701268][T17367] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.714869][T17352] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 325.768919][T17367] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.780387][T17352] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 325.797763][T17367] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.808929][T17367] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.836277][T17352] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 325.846650][T17367] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 325.870086][T17367] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 325.882498][T17352] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 325.890611][T17367] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 325.910503][T17352] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 325.918998][T17367] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 325.928047][T17352] Interruptibility = 00000000 ActivityState = 00000000 [ 325.935393][T17367] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 325.944402][T17352] *** Host State *** [ 325.948404][T17367] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 325.948564][T17352] RIP = 0xffffffff811b4620 RSP = 0xffff88805a827998 [ 325.957387][T17367] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 325.962559][T17352] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 325.975751][T17367] Interruptibility = 00000000 ActivityState = 00000000 [ 325.978366][T17352] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 325.987380][T17367] *** Host State *** [ 325.993408][T17352] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 325.993422][T17352] CR0=0000000080050033 CR3=000000009f474000 CR4=00000000001426f0 [ 325.999837][T17367] RIP = 0xffffffff811b4620 RSP = 0xffff88805ef97998 [ 326.006605][T17352] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 326.020755][T17367] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 326.021104][T17352] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 326.028557][T17367] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 326.036259][T17352] *** Control State *** [ 326.043433][T17367] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 326.051156][T17352] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 326.060067][T17367] CR0=0000000080050033 CR3=000000009e6d9000 CR4=00000000001426f0 [ 326.061848][T17352] EntryControls=0000d1ff ExitControls=002befff [ 326.069998][T17367] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 326.090829][T17352] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 326.098583][T17352] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 326.098944][T17367] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 326.106000][T17352] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 326.106008][T17352] reason=80000021 qualification=0000000000000000 [ 326.106015][T17352] IDTVectoring: info=00000000 errcode=00000000 07:19:29 executing program 0: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffffffffffcc) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7e3c6305, 0x40000) connect$netlink(r3, &(0x7f0000000040)=@unspec, 0xc) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x80000000, 0x5b7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 07:19:29 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400003, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20c080, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000000000)=0x5) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r4, 0x3c, 0x1, @in={0x2, 0x4e24, @rand_addr=0x2}}}, 0xa0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) munlockall() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x28, &(0x7f0000000280)}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @remote, 0xe06}, {0xa, 0x4e22, 0x1, @empty, 0x3}, 0xffffffffffffffff, 0x8}}, 0x48) 07:19:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xae01, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:29 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) write$vhci(r1, 0x0, 0xfffffffffffffef2) read(r0, &(0x7f0000000080)=""/215, 0x14b) read(r0, &(0x7f0000000180)=""/55, 0x37) 07:19:29 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x1000000}) [ 326.106021][T17352] TSC Offset = 0xffffff50072781b3 [ 326.106030][T17352] EPT pointer = 0x00000000a90da01e [ 326.118006][T17367] *** Control State *** [ 326.132319][T17367] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 326.160750][T17367] EntryControls=0000d1ff ExitControls=002befff [ 326.167350][T17367] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 326.181785][T17367] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 326.212358][T17367] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 326.238734][T17367] reason=80000021 qualification=0000000000000000 [ 326.285844][T17367] IDTVectoring: info=00000000 errcode=00000000 [ 326.292040][T17367] TSC Offset = 0xffffff4fe3c4124c [ 326.319238][T17367] EPT pointer = 0x000000009966701e 07:19:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xae41, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:29 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x2000000}) 07:19:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) 07:19:29 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x3000000}) 07:19:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xae60, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 326.614633][T17420] *** Guest State *** [ 326.630540][T17420] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xaf01, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 326.669092][T17420] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 326.688771][T17420] CR3 = 0x0000000000000000 [ 326.695697][T17420] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 326.712422][T17420] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 326.760290][T17420] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 326.779743][T17420] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 326.793022][T17420] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 326.808556][T17420] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 326.818595][T17420] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 326.838320][T17420] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 326.858496][T17420] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 326.870131][T17420] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 326.881720][T17420] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 326.899772][T17420] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 326.910937][T17420] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 326.925616][T17420] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 326.935325][T17420] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 326.948569][T17420] Interruptibility = 00000000 ActivityState = 00000000 [ 326.957929][T17420] *** Host State *** [ 326.962175][T17420] RIP = 0xffffffff811b4620 RSP = 0xffff888059b37998 [ 326.969962][T17420] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 326.979151][T17420] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 326.988238][T17420] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 326.995959][T17420] CR0=0000000080050033 CR3=00000000a924e000 CR4=00000000001426e0 [ 327.003941][T17420] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 327.011530][T17420] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 327.018408][T17420] *** Control State *** [ 327.022600][T17420] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 327.030168][T17420] EntryControls=0000d1ff ExitControls=002befff [ 327.036596][T17420] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 327.045422][T17420] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 327.052877][T17420] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 327.060350][T17420] reason=80000021 qualification=0000000000000000 [ 327.067672][T17420] IDTVectoring: info=00000000 errcode=00000000 [ 327.074603][T17420] TSC Offset = 0xffffff4f3dcc284f [ 327.079703][T17420] EPT pointer = 0x00000000836fe01e 07:19:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b410a4000000007301350000000000950000000200000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) tee(r0, r0, 0xbe, 0x4) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) close(r0) 07:19:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x4000000}) 07:19:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40042408, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:30 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x10f000, 0x100000, 0xc, 0x0, 0x80000001, 0x1, 0x8, 0xd71, 0x9, 0x81, 0xa49a, 0xffffffffffff9910}, {0x0, 0x1000, 0x10, 0x2, 0x0, 0xfffffffffffffff7, 0x9, 0x9, 0x6e, 0x4, 0x9, 0x8}, {0xf000, 0xd000, 0xf, 0x74e, 0x1, 0x7, 0x48000000000, 0x3, 0x6d, 0xffff, 0x1000, 0xb9f}, {0x4000, 0x5000, 0xe, 0x1, 0x4f8, 0x8, 0x6, 0x9773, 0x7fff, 0x1, 0x1, 0x1b7}, {0x0, 0xcecefa5e6b0f9a4d, 0xc, 0xfb38, 0x6, 0x1, 0x8, 0xfffffffffffffc01, 0x1c52, 0x8, 0x1ff, 0x101}, {0x4, 0x10000, 0xe, 0x3f, 0x5, 0x9, 0x8, 0x8, 0x3ff, 0x4, 0x4, 0x2}, {0x5000, 0x4, 0x9, 0x1, 0x10001, 0xa9d, 0x101, 0x200, 0x3, 0x2, 0x4, 0x7fff}, {0x1000, 0x3000, 0x8, 0xffff, 0x0, 0x9, 0x0, 0xd206, 0x4, 0x78, 0x800, 0x401}, {0x2, 0x3000}, {0x3006, 0x3000}, 0x2, 0x0, 0x11f000, 0x10002, 0x5, 0x1, 0xf000, [0x80000001, 0xa1, 0x3, 0x5]}) close(r0) 07:19:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) 07:19:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x5000000}) 07:19:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x400448c8, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 327.360182][T17452] *** Guest State *** 07:19:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80100, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x80000000, 0x4, 0x6, 0x3, 0x8001}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x7}, 0x8) ioctl$UI_DEV_DESTROY(r0, 0x5502) 07:19:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x6000000}) [ 327.394312][T17452] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 327.470125][T17452] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 327.501462][T17463] *** Guest State *** 07:19:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045108, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 327.520736][T17463] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 327.531128][T17452] CR3 = 0x0000000000000000 [ 327.534443][T17463] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 327.542328][T17452] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 327.555387][T17463] CR3 = 0x0000000000000000 [ 327.561426][T17463] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 327.577670][T17463] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 327.593982][T17469] input: syz1 as /devices/virtual/input/input30 [ 327.598114][T17463] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 327.613614][T17452] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 327.629132][T17452] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 327.639044][T17463] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 327.653799][T17452] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 327.676813][T17452] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.687399][T17463] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.702198][T17452] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.711657][T17463] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.727652][T17463] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.744068][T17452] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.760185][T17463] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.776148][T17452] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.792126][T17463] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.792139][T17452] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 327.792166][T17452] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 327.807299][T17463] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 327.813081][T17452] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 327.832523][T17463] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 327.838221][T17452] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 327.852470][T17463] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 327.863628][T17452] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 327.869188][T17463] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 327.881433][T17452] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 327.882540][T17463] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 327.888910][T17452] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 327.902371][T17463] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 327.913269][T17463] Interruptibility = 00000000 ActivityState = 00000000 [ 327.917030][T17452] Interruptibility = 00000000 ActivityState = 00000000 [ 327.924254][T17452] *** Host State *** [ 327.924308][T17452] RIP = 0xffffffff811b4620 RSP = 0xffff88805dfef998 [ 327.931734][T17463] *** Host State *** [ 327.948902][T17463] RIP = 0xffffffff811b4620 RSP = 0xffff88805f107998 [ 327.950418][T17452] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 327.964417][T17452] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 327.969879][T17463] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 327.973251][T17452] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 327.980626][T17463] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 327.992039][T17452] CR0=0000000080050033 CR3=000000008de9c000 CR4=00000000001426e0 [ 327.995963][T17463] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 328.003886][T17452] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 328.012294][T17463] CR0=0000000080050033 CR3=00000000a924e000 CR4=00000000001426f0 [ 328.024780][T17452] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 328.028599][T17463] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 328.036940][T17452] *** Control State *** [ 328.046045][T17463] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 328.052213][T17452] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 328.060344][T17452] EntryControls=0000d1ff ExitControls=002befff [ 328.060800][T17463] *** Control State *** [ 328.066672][T17452] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 328.066681][T17452] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 328.066689][T17452] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 328.066703][T17452] reason=80000021 qualification=0000000000000000 [ 328.071372][T17463] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 328.083602][T17452] IDTVectoring: info=00000000 errcode=00000000 [ 328.102166][T17452] TSC Offset = 0xffffff4ed646d7cc [ 328.108443][T17463] EntryControls=0000d1ff ExitControls=002befff [ 328.114203][T17452] EPT pointer = 0x000000008b0b001e 07:19:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000000300)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="e7724930150b29141ac27b6b51bdcd40935751d77a153885a5321ba25cd393011396cffed6e5e681ad4496138a0e49e3041d223a34e17760e220f12ecb36e4d9863c60f38385bca5dcdd118e13758a215cc183117a9910c71beb84677a115199e524014fb0480466b65526e82a9f96cc63c4a2b74f7dba6859432212b8216ef6a8a61d3d1762f3ef31b592328271a38988447233617a15c4ebc61c3e51902db1125885c375902388ca628bd1b041d322f5", 0xb1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="a976d8dbf56225f9cc7ec4a1ac18a46eecf89e4c05b9e6e7ef79154e61f63251f49f76ea087a2686d7e7c081d1f4cb1fb0a392aa7c413bed642c79701c58e00011db91ce8648532e2cc5fe684eeedc6113854bd3165ce007faed0ceecf12d6414d68328cc62b4df29d634dda", 0x6c}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x80, &(0x7f0000002680)=[{&(0x7f00000024c0)="b7f3a57b5fd1781d5bea2a9721438daf5c4229d17a97c901fc783e89d5cb71717a43d7412be2b81bef94f2b2aae139d1caf02dc81675f2d7c1c9371974608af4a8aa6e0064e402678ffa", 0x4a}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000003080)}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000005680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x3, 0x0, 0x1}}, 0x80, 0x0}}], 0x6, 0x40000004800) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x121440, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)) 07:19:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x7000000}) 07:19:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045109, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 328.119698][T17463] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 328.138992][T17463] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 328.158628][T17463] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 328.203637][T17469] input: syz1 as /devices/virtual/input/input31 07:19:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 328.243934][T17463] reason=80000021 qualification=0000000000000000 07:19:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x8000000}) [ 328.295957][T17463] IDTVectoring: info=00000000 errcode=00000000 [ 328.375225][T17463] TSC Offset = 0xffffff4ec0cb925b 07:19:31 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x7, 0x2000) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000480)) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r3 = perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ptrace$getregs(0xe, 0x0, 0x7ff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff80000001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40400d5}, 0x4000000) ioctl$TUNATTACHFILTER(r3, 0x400854d5, &(0x7f0000000900)={0x7, &(0x7f0000000880)=[{0x8, 0xc6f1, 0xffffffffffffffce, 0x7fff}, {0xffff, 0x2, 0xddc9, 0xbee}, {0x4, 0x9, 0xffffffff80000001, 0x7}, {0x4, 0x10001, 0x85, 0xb31}, {0x1, 0x6, 0xff, 0x100000000}, {0x80000001, 0x9, 0x0, 0x80}, {0x1, 0x66, 0x3, 0xfffffffffffeffff}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0xffffffff00000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r7}}, 0x48) [ 328.423472][T17463] EPT pointer = 0x000000009c68701e 07:19:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x82) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000240)={0x0, 0x4, [0x0, 0x9, 0x678, 0x9a, 0x2, 0x1, 0x2, 0x7893]}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x72, "d38ba47434a0728c5816851fe1dede203ae3ff81ceaf85d5ed9c4e06797dd3f03e60e916e29582b0f785e1cbcf645d58e58e4a20561fdaca0c7946696206786485382a730adfcd1f0582291c788a42e72c39882022d93f9f5d7344ffd1b92ab5a9a5ae52859443910b07edfdf4b8a3956652"}, &(0x7f0000000180)=0x96) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b0e002e800c3800815e510befccd7", 0x2e}], 0x1}, 0x0) [ 328.541759][T17493] *** Guest State *** [ 328.550672][T17493] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510f, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x1f000000}) [ 328.604402][T17493] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 328.687242][T17493] CR3 = 0x0000000000000000 [ 328.691955][T17493] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 328.727804][T17512] netlink: 'syz-executor.0': attribute type 46 has an invalid length. [ 328.742038][T17493] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 328.761976][T17493] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 07:19:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045407, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:32 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_getnetconf={0x14, 0x52, 0x301}, 0x14}}, 0x0) 07:19:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x40000000}) 07:19:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 328.778092][T17512] netlink: 'syz-executor.0': attribute type 46 has an invalid length. [ 328.802776][T17493] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 328.883909][T17493] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 328.916910][T17493] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 328.947954][T17493] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.006282][T17493] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.059508][T17493] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.082064][T17530] *** Guest State *** [ 329.106847][T17493] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 329.124827][T17530] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 329.143751][T17493] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 329.157249][T17530] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 329.167458][T17493] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 329.176824][T17493] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 329.185959][T17493] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 329.189519][T17530] CR3 = 0x0000000000000000 [ 329.193191][T17493] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 329.198672][T17530] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 329.207006][T17493] Interruptibility = 00000000 ActivityState = 00000000 [ 329.213963][T17530] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 329.220583][T17493] *** Host State *** [ 329.230511][T17493] RIP = 0xffffffff811b4620 RSP = 0xffff888059b37998 [ 329.231526][T17530] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 329.237575][T17493] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 329.249623][T17530] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 329.252085][T17493] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 329.260760][T17530] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.269514][T17493] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 329.283268][T17530] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.285183][T17493] CR0=0000000080050033 CR3=0000000099357000 CR4=00000000001426e0 [ 329.298283][T17530] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.301438][T17493] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 329.310226][T17530] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.317549][T17493] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 329.331046][T17530] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 329.333043][T17493] *** Control State *** [ 329.342105][T17530] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 329.346682][T17493] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 329.359700][T17530] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 329.362312][T17493] EntryControls=0000d1ff ExitControls=002befff [ 329.372038][T17530] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 329.377263][T17493] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 329.390834][T17530] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 329.393788][T17493] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 329.402624][T17530] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 329.409968][T17493] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 329.421888][T17530] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 329.424668][T17493] reason=80000021 qualification=0000000000000000 [ 329.432891][T17530] Interruptibility = 00000000 ActivityState = 00000000 [ 329.439857][T17493] IDTVectoring: info=00000000 errcode=00000000 [ 329.439864][T17493] TSC Offset = 0xffffff4e32665d28 07:19:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x8b, 0x6, 0x2, 0x100, '\x00', 0x401}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) 07:19:32 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045408, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="230000001e00817478d12876ca81410000000000080001000000000000000020000000", 0x23}], 0x1}, 0x0) 07:19:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xfdfdffff}) [ 329.439873][T17493] EPT pointer = 0x000000009c3c301e [ 329.452566][T17530] *** Host State *** [ 329.459527][T17530] RIP = 0xffffffff811b4620 RSP = 0xffff88805f107998 [ 329.489374][T17530] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 329.497675][T17530] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 07:19:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xfdffffff}) [ 329.529481][T17542] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.538775][T17530] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 329.538823][T17530] CR0=0000000080050033 CR3=00000000916cf000 CR4=00000000001426f0 07:19:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xd29f, 0x4, 0x3, 0x4}, 0x10) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x12, &(0x7f0000000040)={0x0, 0x0}, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x1a, "70f9422799d1f49a59d11769e801644b1eed48f1671bba38e11c"}, &(0x7f0000000180)=0x3e) [ 329.589596][T17530] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 329.618788][T17530] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 07:19:32 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045431, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 329.642090][T17530] *** Control State *** [ 329.643751][T17550] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.661739][T17530] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 07:19:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@random={'system.', 'TPROXY\x00'}, &(0x7f0000000100)='TPROXY\x00', 0x7, 0x1) ioctl(r0, 0x8b38, &(0x7f0000000000)='m:') getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 07:19:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xff000000}) 07:19:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) add_key(&(0x7f0000000140)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x803, 0x300) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000028c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000100)="4d18d83388f7e2da149a0f3317b62de064ac0595746eccfe78e2f6bcd9343d18"}) [ 329.716773][T17549] *** Guest State *** [ 329.722235][T17530] EntryControls=0000d1ff ExitControls=002befff [ 329.745047][T17549] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 329.758921][T17530] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 329.816744][T17549] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 329.833152][T17530] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 329.862537][T17549] CR3 = 0x0000000000000000 [ 329.896961][T17549] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 329.911585][T17530] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 329.933957][T17549] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 329.989461][T17530] reason=80000021 qualification=0000000000000000 [ 330.014831][T17530] IDTVectoring: info=00000000 errcode=00000000 [ 330.025438][T17549] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 330.033037][T17530] TSC Offset = 0xffffff4de8a7a826 [ 330.038558][T17530] EPT pointer = 0x0000000099fc101e [ 330.044226][T17549] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 07:19:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) [ 330.082005][T17549] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.119213][T17549] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.142624][T17549] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.183860][T17549] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.194257][T17549] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.203208][T17549] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 330.212223][T17549] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 330.224883][T17549] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 330.240849][T17549] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 330.250124][T17549] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 330.258367][T17549] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 330.267768][T17549] Interruptibility = 00000000 ActivityState = 00000000 [ 330.275694][T17549] *** Host State *** [ 330.279872][T17549] RIP = 0xffffffff811b4620 RSP = 0xffff88805dfef998 [ 330.286973][T17549] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 330.294580][T17549] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 330.303252][T17549] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 330.309977][T17549] CR0=0000000080050033 CR3=000000008caa0000 CR4=00000000001426f0 [ 330.317832][T17549] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 330.325499][T17549] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 330.332304][T17549] *** Control State *** [ 330.336607][T17549] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 330.344084][T17549] EntryControls=0000d1ff ExitControls=002befff [ 330.350262][T17549] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 330.358003][T17549] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 330.365441][T17549] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 330.372722][T17549] reason=80000021 qualification=0000000000000000 [ 330.379799][T17549] IDTVectoring: info=00000000 errcode=00000000 [ 330.386685][T17549] TSC Offset = 0xffffff4d9609bfd1 07:19:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:33 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x400454ca, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xff030000}) 07:19:33 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x6, 0xb0100) openat$cgroup_procs(r0, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x64281, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000002c0)={0x3, 0x5, 0x4, 0x10, {0x0, 0x2710}, {0x5, 0xc, 0x9, 0x8, 0x6b60000000000, 0x1, "3973d772"}, 0xffffffffffffffc0, 0x7, @planes=&(0x7f0000000280)={0xffffffff, 0x50b6, @userptr=0x3, 0x1}, 0x4}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00\x00\x00\xf8\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f0000000080)=0x1e) ioctl(r2, 0xffffffffffffffb7, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000e40)={{}, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x404c534a, &(0x7f0000000100)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000200)={0x7, 0x1000}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x0, 0x100000000}) 07:19:33 executing program 1: r0 = socket$packet(0x11, 0x40000000003, 0x300) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xe747, 0x101002) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81, 0x2) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0xb21, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 07:19:33 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e20, @multicast1}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x7, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x8, 0x100000000}, &(0x7f0000000180)=0x88) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={r4, 0x5d, "2ecaf70d8f95b7faa3d20184b2204a83f315db3fabee419f8286ee63db31d821ed27bc8ec758ed52c2436747bdbf56fccd5b953314723befdfcef648fed3b9a3f85c0abbfe921bbff75fc3c539a789d558671ceb1b3a6520a39ff9fdbb"}, &(0x7f00000001c0)=0x65) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x4000000000000000) ioctl$HDIO_GETGEO(r1, 0x301, 0x0) [ 330.391692][T17549] EPT pointer = 0x00000000a94d101e 07:19:33 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004556b, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:33 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xfffffdfd}) 07:19:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x129001) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, [0xfcc7, 0x4, 0x6, 0x10001]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b05002e800c3800005e510befccd7", 0x2e}], 0x1}, 0x0) [ 330.647868][T17602] *** Guest State *** 07:19:33 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40046432, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 330.674366][T17602] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 330.709140][T17602] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40002, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000140)=0x12f) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000280)={0xc53, 0x1, 0x6}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003040)='\xdf\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x200, 0x9, 0x101}, &(0x7f0000000240)=0x10) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x0) 07:19:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x80005, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000000c0)) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)) [ 330.741014][T17602] CR3 = 0x0000000000000000 [ 330.764831][T17602] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 330.792552][T17602] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 330.836459][T17616] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 330.849770][T17602] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 330.871712][T17602] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 330.893521][T17616] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 330.913759][T17602] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.922565][T17602] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.952394][T17602] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 330.969492][T17602] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.005536][T17602] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.055146][T17602] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 331.065532][T17602] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 331.076587][T17602] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 331.092473][T17602] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 331.101759][T17602] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 331.109151][T17602] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 331.117486][T17602] Interruptibility = 00000000 ActivityState = 00000000 [ 331.125614][T17602] *** Host State *** [ 331.129571][T17602] RIP = 0xffffffff811b4620 RSP = 0xffff888060bc7998 [ 331.136378][T17602] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 331.143597][T17602] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 331.152212][T17602] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 331.158912][T17602] CR0=0000000080050033 CR3=00000000a924e000 CR4=00000000001426f0 [ 331.166790][T17602] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 331.174294][T17602] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 331.181105][T17602] *** Control State *** [ 331.185354][T17602] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 331.192769][T17602] EntryControls=0000d1ff ExitControls=002befff 07:19:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xfffffffd}) 07:19:34 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40049409, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:34 executing program 3: r0 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x4000, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20001f9f00ea"], 0x6) fcntl$setlease(r0, 0x400, 0x3) mount(0x0, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x0, 0x0) 07:19:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000006) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x40, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) connect$packet(r1, &(0x7f0000000ec0)={0x11, 0x7, r2, 0x1, 0x663aad99, 0x6, @broadcast}, 0x14) umount2(&(0x7f0000000000)='./file0\x00', 0xe) r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x525001) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000200)={{0x0, 0x2, 0x80000001, 0x3, 0xffffffff}, 0x80, 0x5dba}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x80000001, 0x4) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8000, 0x0) getsockname$unix(r4, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) 07:19:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, [], [{0x1, 0x77, 0xfffffffffffffff8, 0x0, 0x3ff, 0x1}, {0x10001, 0x0, 0x9, 0x8000, 0xfffffffffffff0ac, 0x5}], [[], []]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x280000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) write$FUSE_LSEEK(r1, &(0x7f0000000100)={0x18, 0x0, 0x7, {0x10000}}, 0x18) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r3, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 331.199007][T17602] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 331.207050][T17602] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 331.214625][T17602] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 331.222029][T17602] reason=80000021 qualification=0000000000000000 [ 331.229189][T17602] IDTVectoring: info=00000000 errcode=00000000 [ 331.235446][T17602] TSC Offset = 0xffffff4d11e04cbd [ 331.240502][T17602] EPT pointer = 0x00000000a66f701e 07:19:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x100000000000000}) 07:19:34 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085117, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:34 executing program 1: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000a8000)=[{&(0x7f0000000000)="580000001400192300bb4b80040d8c5628", 0x11}], 0x1) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e20, @loopback}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000001, 0x40, 0x2}) [ 331.477709][T17645] *** Guest State *** [ 331.487811][T17645] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:34 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100c0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000600)={0x1, 0x8000, "12981ed8a03efb71d0c6665d65f7514694a4be82241337f9", {0x4, 0x7}, 0x51}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dlm-control\x00', 0x80802, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0x1000, 0x4) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"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"}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="020010000000000000000000"]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000000140)=""/167) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000780)={r1, &(0x7f0000000100), 0x0, 0x2}, 0xfffffffffffffea7) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) sendto$packet(r1, &(0x7f0000000640)="7a8da0b376e1e1b0f63bc6a79f1b8442f7cb0bd0582c66d9dacc84ac19b02d7633f47ca4665c9c74ab18ad658164d824c4a33287d3fd6c1b0bcd5e35daf99b3fa71c7fd942683c714c74631b3a01fc4742495be44e1257f28e28f2225782ad38f5422bb6bea497bfa16c9df724ed657a6edb39bb326242ee9a7c77", 0x7b, 0x20000000, &(0x7f0000000740)={0x11, 0x5, r2, 0x1, 0x6, 0x6, @random="954cb6025764"}, 0x14) fallocate(r0, 0x10, 0x9, 0x8) [ 331.543233][T17645] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 331.583589][T17645] CR3 = 0x0000000000000000 [ 331.602985][T17654] *** Guest State *** 07:19:34 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x200000000000000}) [ 331.643696][T17645] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 331.652573][T17654] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 331.653887][T17645] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 331.721056][T17654] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 331.753659][T17645] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 331.772448][T17654] CR3 = 0x0000000000000000 [ 331.777469][T17645] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 331.794822][T17654] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 331.829395][T17654] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 331.836273][T17645] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.836320][T17645] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.836351][T17645] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.836418][T17645] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.836521][T17645] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.836555][T17645] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 331.836588][T17645] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 331.836614][T17645] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 331.836687][T17645] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 331.836718][T17645] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 331.836795][T17645] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 331.836852][T17645] Interruptibility = 00000000 ActivityState = 00000000 [ 331.836885][T17645] *** Host State *** [ 331.836922][T17645] RIP = 0xffffffff811b4620 RSP = 0xffff888050c97998 [ 331.865568][T17654] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 331.892147][T17654] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 331.912684][T17654] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.917200][T17645] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 331.926639][T17654] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.950499][T17654] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.954876][T17645] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 331.958967][T17654] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 331.982630][T17645] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 331.992748][T17645] CR0=0000000080050033 CR3=000000009e954000 CR4=00000000001426e0 [ 332.002691][T17654] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 332.037938][T17645] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 332.050852][T17654] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 332.052920][T17645] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 332.061191][T17654] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 332.073087][T17645] *** Control State *** [ 332.076943][T17654] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 332.076976][T17654] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 332.077008][T17654] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 332.077040][T17654] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 332.077124][T17654] Interruptibility = 00000000 ActivityState = 00000000 [ 332.077171][T17654] *** Host State *** [ 332.077210][T17654] RIP = 0xffffffff811b4620 RSP = 0xffff88805d08f998 [ 332.077280][T17654] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 332.077306][T17654] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 332.077350][T17654] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 332.084803][T17645] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 332.095496][T17654] CR0=0000000080050033 CR3=000000008a794000 CR4=00000000001426e0 07:19:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:35 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4008ae89, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:35 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x80002) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xa, "4e3374a076379aa34cd9"}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='projid_map\x00') lseek(r2, 0x4d, 0x0) r3 = fcntl$getown(r2, 0x9) fcntl$setown(r2, 0x8, r3) ioctl$KDSETMODE(r2, 0x4b3a, 0x2) 07:19:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x8001, 0x5, 0x7, 0x6}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0xfff}, 0x8) 07:19:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x300000000000000}) [ 332.099403][T17645] EntryControls=0000d1ff ExitControls=002befff [ 332.111422][T17654] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 332.115252][T17645] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 332.121937][T17654] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 332.126610][T17645] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 332.133367][T17654] *** Control State *** [ 332.140430][T17645] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 332.152784][T17654] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 332.155260][T17645] reason=80000021 qualification=0000000000000000 [ 332.162847][T17654] EntryControls=0000d1ff ExitControls=002befff [ 332.173600][T17645] IDTVectoring: info=00000000 errcode=00000000 [ 332.173618][T17645] TSC Offset = 0xffffff4ca29a11cb [ 332.173657][T17645] EPT pointer = 0x00000000650bd01e 07:19:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x400000000000000}) 07:19:35 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4008af03, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 332.291904][T17680] sctp: [Deprecated]: syz-executor.0 (pid 17680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.291904][T17680] Use struct sctp_sack_info instead [ 332.328215][T17654] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 07:19:35 executing program 1: unshare(0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) [ 332.528685][T17685] *** Guest State *** [ 332.540038][T17685] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 332.561924][T17685] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 332.585140][T17685] CR3 = 0x0000000000000000 [ 332.590668][T17685] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 332.594800][T17654] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 332.611379][T17685] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 332.620185][T17685] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 332.630815][T17685] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 332.650320][T17685] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 332.664629][T17654] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 332.679304][T17685] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 332.688588][T17654] reason=80000021 qualification=0000000000000000 [ 332.696186][T17654] IDTVectoring: info=00000000 errcode=00000000 [ 332.702529][T17685] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 332.711819][T17654] TSC Offset = 0xffffff4c8cd9af5c [ 332.717234][T17654] EPT pointer = 0x000000009484401e [ 332.722577][T17685] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x7e, @broadcast, 0x4e23, 0x2, 'lblc\x00', 0x8, 0xe591, 0x4}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000280)={0x2, "964c8691e281de7eeb947f136731eee94ec9420b0c710e6b9ed8eef6eaf4d262", 0x0, 0x1}) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xa0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000002c0)=0x5, 0x8) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000001c0)={0x99f, 0x8}) r3 = socket$inet(0x2, 0x40000000002, 0x200000000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x4000, 0x0) write$FUSE_POLL(r4, &(0x7f0000000200)={0x18, 0x0, 0x1, {0x1}}, 0xfffffd32) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x50) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x81, 0x4) 07:19:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x500000000000000}) 07:19:35 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4008af30, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 332.749901][T17685] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 332.762549][T17685] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 332.782013][T17685] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 332.800740][T17706] IPVS: set_ctl: invalid protocol: 126 255.255.255.255:20003 [ 332.841103][T17685] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 332.846176][T17706] IPVS: set_ctl: invalid protocol: 126 255.255.255.255:20003 [ 332.889535][T17685] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 332.941589][T17709] *** Guest State *** [ 332.969255][T17685] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 332.977025][T17709] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 332.993753][T17685] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 332.999247][T17709] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 333.002284][T17685] Interruptibility = 00000000 ActivityState = 00000000 [ 333.012049][T17709] CR3 = 0x0000000000000000 [ 333.012124][T17709] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 333.012149][T17709] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 333.012225][T17709] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 333.012254][T17709] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 333.020011][T17685] *** Host State *** [ 333.028638][T17709] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 333.031003][T17685] RIP = 0xffffffff811b4620 RSP = 0xffff888060b67998 [ 333.037395][T17709] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 333.037425][T17709] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 333.037458][T17709] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 333.046122][T17685] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 333.058892][T17709] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 333.067912][T17685] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 333.074741][T17709] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 333.083595][T17685] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 333.096648][T17709] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 333.100535][T17685] CR0=0000000080050033 CR3=0000000094458000 CR4=00000000001426f0 [ 333.112414][T17709] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 333.116770][T17685] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 333.125019][T17709] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 333.125057][T17709] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 333.125125][T17709] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 333.125156][T17709] Interruptibility = 00000000 ActivityState = 00000000 [ 333.125188][T17709] *** Host State *** [ 333.125227][T17709] RIP = 0xffffffff811b4620 RSP = 0xffff888062ee7998 [ 333.125296][T17709] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 333.125329][T17709] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 333.125359][T17709] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 333.125427][T17709] CR0=0000000080050033 CR3=00000000a4b8e000 CR4=00000000001426e0 [ 333.125492][T17709] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 333.125563][T17709] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 333.125585][T17709] *** Control State *** [ 333.125597][T17709] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 333.125622][T17709] EntryControls=0000d1ff ExitControls=002befff [ 333.125665][T17709] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 333.125695][T17709] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 333.125732][T17709] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 333.125760][T17709] reason=80000021 qualification=0000000000000000 [ 333.125798][T17709] IDTVectoring: info=00000000 errcode=00000000 [ 333.135590][T17685] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 333.149523][T17709] TSC Offset = 0xffffff4bd5a12ec4 [ 333.153725][T17685] *** Control State *** [ 333.165158][T17709] EPT pointer = 0x000000008cd2f01e [ 333.169133][T17685] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 333.201074][T17685] EntryControls=0000d1ff ExitControls=002befff [ 333.217981][T17685] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 333.287950][T17685] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 333.309619][T17685] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 333.373121][T17685] reason=80000021 qualification=0000000000000000 [ 333.383585][T17685] IDTVectoring: info=00000000 errcode=00000000 [ 333.389736][T17685] TSC Offset = 0xffffff4c17319720 07:19:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)=ANY=[@ANYBLOB="726177000000000000c9d4000000000000000059e69de6d04a85c925ee19db582fb2ed1938ebb880aff70000001100000000000000000000000900000003000000b4020000000000000801000008"], 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x3, 0x1}, 0x8) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) 07:19:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x600000000000000}) 07:19:36 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x400c6615, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x0, 0x0) r0 = userfaultfd(0x80000) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x20000000) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00005ff000/0x3000)=nil, 0x3000}, 0x2}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180)={0x10000, 0x80000000, 0x3f, 0x100}, 0x8) 07:19:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 333.396365][T17685] EPT pointer = 0x00000000a411a01e 07:19:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x700000000000000}) 07:19:36 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x401070cd, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r2 = getpgrp(0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = getpid() r6 = getuid() r7 = getegid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001d80)=0x0) getresuid(&(0x7f0000001dc0)=0x0, &(0x7f0000001e00), &(0x7f0000001e40)) stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001f40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001f80)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000002080)=0xe8) r13 = getgid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002240)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002280)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000002380)=0xe8) getgroups(0x5, &(0x7f00000023c0)=[0x0, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) r17 = gettid() r18 = geteuid() getresgid(&(0x7f0000002400), &(0x7f0000002440)=0x0, &(0x7f0000002480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003940)={0x0, r0, 0x0, 0x3, &(0x7f0000003900)='(&\x00'}, 0x30) stat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003e00)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000003f00)=0xe8) r25 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003f40)={0x0}, &(0x7f0000003f80)=0xc) getresuid(&(0x7f0000003fc0)=0x0, &(0x7f0000004000), &(0x7f0000004040)) r28 = getgid() fcntl$getownex(r1, 0x10, &(0x7f0000004080)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000040c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000041c0)=0xe8) r31 = getegid() r32 = getpid() r33 = getuid() lstat(&(0x7f0000004200)='\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r35 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0}, &(0x7f0000004300)=0xc) r37 = getgid() r38 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000058c0)={{{@in=@initdev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000059c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005a00)={0x0, 0x0, 0x0}, &(0x7f0000005a40)=0xc) r41 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006500)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000006600)=0xe8) r43 = getgid() sendmmsg$unix(r1, &(0x7f0000006680)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)="043a4a4873f669ee1201516aee9534202af7ce0751af3738c764e61a9a1baedaefeeba042811dae29151d9157f4eb57812525500", 0x34}, {&(0x7f0000000100)="a97f4fd4c97a5380be5a75cea63a03fab8e3a912f35cc2ad2c1ae81c5015e857b4e17d388ee2f1a72680dfb0cd3eb2a0dc861b7c0a72cf20ae49d5704a117b4b5f2bfa23487fd020415994a0040b708f4c5434a55cf47dad43d0b8720494feee566d10b391d85d47cba39a2f796d78dfa30e40698305e842b227f2b8c991603d31dd175f51a8de", 0x87}, {&(0x7f00000001c0)="5e108c7ca9dec9e1969c7f007b2761161cacfdd9bb5b62a76f7be75e577adf24fc7762351d8647feb0f9386d71fcc2b7e7b8075ffb82a0c0f735300307d660906db833e1700591efd5b74526cbe13f7b8dd6d0916f73b2dd1e50f1741dad2c5b660b9964e97ff58db7c2fdbe1cd33d650c17f64da34bc4ac0753d5a6597e60fb0ef59015c423a74fa62179c3be67bd1b7cb772ebe92f53094db87b228258579dbe8ffa1d488ecae52eddc5781e38de29ba7418b651f62279363359db228bb00856cd526cc49f71b75eb3b0f569c3819f8c09c38f54d6f56ba51f722fea41242e1387b5d4335aa360bc43", 0xea}, {&(0x7f00000002c0)="94e16ef0740c1fb5463816d1df2ae5cf8feb8c51d59ae10692471ee374340a55fb26b5b0551040f6ff48c3528ff267dfe931a772dc976863f56b52d10f829c04c24a2cecccb9dbf92f5e7c498fde", 0x4e}, {&(0x7f0000000340)="eda4f045e3fbf1eb0e5e113b005b071112f731aafdaaf9eee9615a763affeec1eb460a6a691e9c1f97e1ded2b65cba63f3e541", 0x33}, {&(0x7f0000000380)="2d0e6e99e2d243c93639e57a5879f6e71d075bd33835e2cd5e37085c1f30fb", 0x1f}], 0x6, 0x0, 0x0, 0x4}, {&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)="545ab7a71157a2834f6bc5e1aa5481552ecb4877e027f928cde3be9c2991348873534bb2a7919b9d025e57994af46d1fc08b282d0376271ef66e3344c78a0cb99e", 0x41}], 0x1, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x3c, 0x80}, {&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d00)=[{&(0x7f00000006c0)="7c69af836f1422bae91a76709557ba627b0562e7dfe4cf66e55b653a31bb9c3e9ee5cd94c76b165adf5dbad6433823c825bd62e4de3617fc7108bd26a788c2d07ffdda76b6274fd807f307432479ffc6075cc6", 0x53}, {&(0x7f0000000740)="9987f05da36c73a6750c1e921a3fb4c5f8f1cd325fd9f169bec852086938eaa3bfc7761552126bcfbbc461188c0eb2392b6ef9ce36569bdb08b55fa54c2cc5be84fee95b0529ca2a490e0df1c90794b4645f34e4da0b407555e08fc729f20c25f196acf8ee6d5d6e9bbdc6e204ebec6b33439baee01f2df6dd160757f9bcfe8c34b31a9c4580e62cf6cd6afe5ec34451b89ece34377404b4e30b0388ecb77485b6862f8e4e08abb69e1d1cf4f2215dc8ac36e1c41944b657c5aef99cdbde6db03951cd71d04ba3f0fb1a1fbf2c943673c53e57596785ef", 0xd7}, {&(0x7f0000000840)="107e10b3645657a2acb4f89cddd68041ab9af16d39d95dccacc718fe1ca6d185220ef041569f58f74be38b70a71ae5519816de6235d122c674bc177f66a205f156ad7144a4e8b39de112165acadc771cda8e09c440fcb6b7f92013fc0b5ab91d1fd8528cfd74247278633754f3ba72e994325ca9e629b2693f21b12557d898e2f0df34923dce99deb7aedbc12947d02819c4aaf650432e4eb5ddf4b99832fbfc04aec95cd7ded62ba960da487404383271bf", 0xb2}, {&(0x7f0000000900)="a110841fe07defd567822499b3763fea3e7985", 0x13}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="1363aa8cbfb330f76fa77a9572949305ae1e30832cbe48540329bfdd5528546c448997e362aa161fbb52657a05685d50f0fef9caf45d58c7fe9309218eb8", 0x3e}, {&(0x7f0000001980)="aa2454931830bcb2af35db5dc7ed7e3a1dea5bdb2efe2d04679aa92c4ccbff7e977ff26317eae0d15f6fcac4856429ce9b402f87c67ca213f1c844ae0eb80bca26ef309002fab9a9dab624e2e009ced725e7e68725799b82af330e777dd2beb2769292fadea122259dbed87678e11fb846b096c493b73328c730dc2865f13c395d646515e715c1f8e7913cd6b88323", 0x8f}, {&(0x7f0000001a40)="f8ee0a31742f829a264722f8a1b15b3ac177cfefd30ff8b1608a4accad37be75c095707619282a6c4a220463dd91a4817da7e90cc8468b60757bfc3132edddf9867735256e296942735ae4bb7e1aa4ad7a8f7ed2f9f166d8981e2e9f8cbc850cd824ebd67b1b7c58df8e45867beaa4ae8b4a9580bef4f90c881e54a04be8368a6698ba", 0x83}, {&(0x7f0000001b00)="a7ded68880b86540935d6899e2fe2321774b92d29e7d11b2992dad7fad474fc73b349391b31230917f1d73ec691bf94c50ea70bba9ad71ebd89c6d31b969498b2c09c734a8b60c154235492dcd0ddb9d042129b179a2a05e960312c611e6fe22fca291248ee6708da23bd40b3c3c3c53e3cdcc1cbad77bacb57225a05b6d70ec64a0575d4222b9cfb8ea0d5043fad69d0fb5891138d3a34f6726688951a35c22779d548064750e25d63e8077ce174e3516797fe368fa12a769551289b34c43f7762e7005fadbc793d29131acf4dd14ce336d44280b45c0dc24f0d0a3cdd0dfbcb2ce8d237b1af619d1b87e57", 0xec}, {&(0x7f0000001c00)="6c3777d4d8bc2b198eecc00b2a9a3999eeb44aec630792b4af92c2491ac8b20729673c516b1c86668371168926e236024ce054a1ba260bc19b497d8f5795cd02a22db539fbee03022f8b4912d04531198d557179289d293d1b102d308661761bf8c107668e2127f02a009e11772cfa114237ad4e757d792037dd886729b0f1b75e91c6661789b8b50ccdd1c29a88de4f2d1c287bdbd5c6a1a29be502289b15174ba38883386711f9dfb69e7132cadf7c85d11e2d07e4f7851ae1f920462b74c8f9e05014cd61832e54d66c02142f013f1666f3a2e5d4a434700ccf6afa9f74452b88b20528891e7c0716cb7f3bdd680d97695ab46720", 0xf6}], 0xa, &(0x7f00000020c0)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, r0, r0, r0, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r0, r1]}}, @cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}], 0xa0, 0x8800}, {&(0x7f0000002180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002200), 0x0, &(0x7f00000024c0)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r0, r0, r0, r1, r0]}}, @cred={{0x18, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x18, 0x1, 0x2, {r17, r18, r19}}}], 0x7c, 0x80}, {&(0x7f0000002540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f00000025c0)="f0c35876c293bc4efd4e28f310091b051cd2a79a596502d44e41271321f31b417a5bf653be2fc0c45bcd5222dac42e5c54050edeb003a27be876c5fc029073d9d998db", 0x43}], 0x1, &(0x7f0000002680)=[@rights={{0x18, 0x1, 0x1, [r1, r0, r0]}}], 0x18, 0x4010}, {&(0x7f00000026c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002740)="607d98a436ef918e9c250ccafe2803ab6eae0bda9a118f1929799cfcdd3083a6f8b3297438f4e29de274a2e6a8cd20471d2ce9d57e3c11035dd00e801290b5814ec661c2a86f8f7832acdd624bbbf9de54de9e27da2677f83951e8b32ff66f4c20cabc32a4851d7024e488288c0289fd5b69dedea25245001d9f99714b5e0ee4235ff3eccfe5590bdb7f5a04314f1877584522a4d36356", 0x97}, {&(0x7f0000002800)="3ad83c79fa50e5c0dedd5864c59a2e0be9a4a88a8ff5407d522495f624391d4533389a3c3e3aa708be4df67e1b939087a6e4a858e6b8df4063e41da216a2976aeb6f699318235072048eab64a22315b9b106ee8f8b8b163c055b2b4d1547c2754557a291a81f9b685a0845d0de7792610f4004246fd5d2e00e41bd716ed0c5779678a5965e2a460fba3dc6401988f552e2c17550ffdd59c0fad196da6f11afcbf39cf2ed4ca2b10cd3c7eb11e3630782e4a85d", 0xb3}, {&(0x7f00000028c0)="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", 0x1000}], 0x3, &(0x7f0000003b00)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r1, r1]}}, @cred={{0x18, 0x1, 0x2, {r20, r21, r22}}}], 0x3c, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003bc0)="ef96cffe96cfca87ea8f357920e740207d4ceeb19f97249bb34195ca9362ec91192f76909f91004b3456c44f1c6430ad8e7bda401f0b34e78e4b4b051c250b3907f5773a83f68cec580823a25f2d6c75b42710ca22166c781912828c11be2007b5db5537eff791bbc3693ef418d84e3e7e600bf3a53ec28e7840d2a3de1fa741641ddca21572020959c6168e72a45af9700c99fff6ebbfc734f8917417ff9d0721f8a3a58584f87e5d3a641c59b51a4ee6c019aa6ffeb5bfc129b093676a17af0f351747ab8efe9d1720ea", 0xcb}, {&(0x7f0000003cc0)="031399d660f8410d17ce440328a255599b4077c5e661666e12cabb4502a9756f2be5e33ea3e0850bc52a8d6510a0e15005ad70f77c7c80f80b208c8c1cef053679f07fd38adc59436e4c986fa23a21732c7e3fa072f02315f13889b4152c28af2193ff49a34c9698df057f378619cca09e50325d437858199842198eb2edeb2837cf914cd6c226d32a07354677facde9d1b9d71e71646aa74f37668690fb01221d52b1e5c219279a1da1ebadbe58ddebe250f2ec8abd9a4b802e42eb8ce5d0a6940d", 0xc2}], 0x2, &(0x7f0000004340)=[@cred={{0x18, 0x1, 0x2, {r23, r24, r25}}}, @cred={{0x18, 0x1, 0x2, {r26, r27, r28}}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r29, r30, r31}}}, @cred={{0x18, 0x1, 0x2, {r32, r33, r34}}}, @cred={{0x18, 0x1, 0x2, {r35, r36, r37}}}], 0x8c, 0x20000000}, {&(0x7f0000004400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000004480)="e4dd5968b64f7396ea4dc16c5f0f88ce1abea86a118f6e0ba1325497a82c0e31ff69f01e53f32765614a6c92f05a14976abf97e20d094f05c5d011fb8f420279fb51245eedb43681277561aa27e552f8b0fddbbc0d9871cbcc2da9c8cf320e798df1a90adce09b025f8e80ec5634eff2ba", 0x71}, {&(0x7f0000004500)="a8c2cd1819c807e0bfe0d2f751ef15b15403b049de4e5d612b16fcad81fa4fd0776376f633d205b49ff0e1733dfdf0b538d476e0d1ec7e6fc9d035a7f3dd7d62bd3b9c9d695903721572d3e57267ca9a728f4f2f5512ca1058f3a61b3624fdb24d7abb74c8d6bbb5fdce7e19a1f31efed0bfd77d4e1e9c87f49a47a88b5bc99dbb57409a7150934dbc606d0cba1974b9e53e98d6605b27f7c1a08c46748d52c9939b33b13acbd3cc318a9ceedfba9ff870bfff65871db24da2c8b89b4eee6e27984472faf03da4b0003df38439a5e10a0f8b48f078b5f326edc8cb", 0xdb}, {&(0x7f0000004600)="79d37f80b38025740cfa892d65897ecac97b5a5ecacf0f4585c360114c9c2c7adcd142ac71e8d822", 0x28}, {&(0x7f0000004640)="5e6a366ab5cfdeac6199eb8a7d33ae2ff64659874df1", 0x16}, {&(0x7f0000004680)="b4950bf775f87fcd02a96cdad73ab3c7556281f16c5134ce33cdff22ce974946bccaddc6b7c607b368953ea01aca7bae449a8233ac6b2afa4136ea659bc695e018669dbfac25499c37ac522d4d21aae3a39bd53db41e1e3039d82b3884b11093b421e54be56363d67897b34abd0cca4d279aa7f7a63eeca94260bf55effce81cf1061aecbc9c3fa27293e971c07e9e484b60fef113e289217cfca47273afc0b7f6d6568013b0", 0xa6}, {&(0x7f0000004740)="3e0229a6b2cd5c54cb4c30e235d909cf6ba29aefe02b1f0542b10064c9f7ee39b094e8912f23f3179ecee7e06b0912fb7f482734db0ac96a6c0164dc2eef6f434b061c9930c46912d33345b4a5ae2bf5d5f60198dce8fc675fbc9c79c2f1326f42aaacabdfec0428dc", 0x69}, {&(0x7f00000047c0)="9dded1c5b3a64896e5d2249321902ab93c834247c0bea82cab78e5481b585db20dfbf7a62297337bc28c49c65e6289136b4bfdf29326ff16f0ca4529f6b4fa21d83c454ab9a6a1fdc58420dad66ddaf1540fffa376d61cedbd858674850e64bbae34987d6b7530ad7b4867eb90f4aa69bcb0c08fb4c78aef618b374b4619e4fc1490e6bea8b7e6240df85abd1337baa710b0073a1eefc371446f983444f4f208084b", 0xa2}, {&(0x7f0000004880)="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", 0x1000}], 0x8, &(0x7f0000005a80)=[@cred={{0x18, 0x1, 0x2, {r38, r39, r40}}}, @rights={{0x18, 0x1, 0x1, [r0, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1, r1]}}], 0x50, 0x4}, {&(0x7f0000005b00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005f80)=[{&(0x7f0000005b80)="e5932b39fe2a62b76d3573c55f536ac19dce8422d56d2524e2e5b4cb987f5d4069e85c433b4b3d5141a09f46a5f1e3deb6d4a5ce72f63c484ea540d2de5a1a9621fd69ba7286d72ff53692f0a48fa78efb7441a49c8ae145bd522fbb0bc354a287ca6df87b52414e3b480e12301a30ce637070dbebe4377d9c1ddbc3cba7e2739d4d9f6a9aa369511c121d3ee2098c70045d9aac5ab7f27a136dd22eec8b8217e66455b12a620531c7fbe6937dd45b98a4f87acc42239f547a4fe2e3cc04aecb542d84dfb6ccf68972ce7236e6191eacdd52c3f07e5f1ade77e1c806fdb53dfed21bd9c62044", 0xe6}, {&(0x7f0000005c80)="2d1deb031475eed3380f472a1d2bd71e55d9571f5d4a79645ed8b3e1a8a8114037d50fd19f523f3b35550e6667584c099a8467f119fd18dc3004c6e9319b031e34ee5e75f524a7e3b6897e558107a692324605fbcb64ec4766da62857493316e5b9731a0a14fef854798c7df3447161b6ae632f2384908bf4c", 0x79}, {&(0x7f0000005d00)="6c7a302d7ebe7b81538d36456d3f2d7f645f54d2872636e9777d66f7857efa96ec2a5ec221f539f10bf483a3bf50d116610e6caa0c6e33bf00f6481055e9302f9fe2cb40aa53ec7edd65db772bca80ea6227ef9939e42d260a4efec2f56e3c2c27866a56e5d4b5fe4af2e01f3e95c9ddba5e5acc42eb6a9f43cef7ea1de1175d79e6b761d5c143ec25f9f0fca3d4f4f016c13e6e", 0x94}, {&(0x7f0000005dc0)="2bd7b360fc3ebfde4231985174a587534408cdc11a9c5c412dfa4e3dc3344fc5cfa4a3983b21ddfa49ea3fce3e8c2d63cffea477cfb1739b426fe195ec1e825ec10a3b91ceb1e700c27c0fae15b053f4d6d998a7bf74dd0a47cd4ac7140a1d07d12e883483b18197f141ebb44b8e2f46855cfae6d7446e8c58ba905c16e24a56fbdf94f71ea1b17a79bdb6a0f471cecc27cd55343a9c54f1f0d234780403f3d3930ba215810d7ac358ee90", 0xab}, {&(0x7f0000005e80)="fd13c2678ff2bd51f986bb11e59f1e70665fafd27feca5e42346d22bb06337a74c154857d8b26e32d1592163a5228732a89f5ce0be8f2ebea92f6d47", 0x3c}, {&(0x7f0000005ec0)="e981cd742cb3d25484c93ccf50f3f9253403adcf6f3de0555154ff57f548893954f4e980876f5759760a0202e28612a057895457f3d322ef9f7c130e2483c00c356a35deee5181ebff125c5a64c9b6b006922b190cfc7792a87794e0ac105ac30909867336f90ecadef8111eed", 0x6d}, {&(0x7f0000005f40)="ee0773", 0x3}], 0x7, 0x0, 0x0, 0x1}, {&(0x7f0000005fc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000064c0)=[{&(0x7f0000006040)="d0f6205f8375d617db0b58bdf3beae910541bf4c1f8778ada82007fb816349d33a76ca988cb99d9a14fed9668403a3d49b349475e3fa285d19d459f79f04ac6e896eef4c0c6f4f3e743c8ef2354112", 0x4f}, {&(0x7f00000060c0)="e8b33d08c45ae412a3ab317f82eb5edd358cc6bdcf37ed2d67454bc168437c6b9aab5064614f7e90bf907cb4b687dc1d40ce6b75c4283eb5f9dbb11c34a47821818b354ab40b20d13e617fe5e2c21e821bf3cf85314dc7b33729894cdcf7740d879e4ad3f36184695acd6c7f4f03f8a00a78ade53b9ecd176fd6401c2b8b714a7e5112fdf91a679d68aaa2ea7ebb2fb5355d2796f54c89bc3b43b63ec8d38b414c7b1fe26d9963d955b8012da2be4eafe9934abca9e548d309d23e18cc817c33c51f04fa44888a774ec79f88aacd136302c987b0562995a8e2830b2f78f9262e4da431337811771f45a7b04b", 0xec}, {&(0x7f00000061c0)="a205c2fd187dd9deb0c69be353503a9dd0f44c47f24793ad019449839158f56833e7c8473527660b5f8c6061d274f3ba2a0503e2faf76c8bdf1d397ac4c66b3750ffa54e66e56fc941e8ae218057f384f0e0a75d5d331521c5710ac0513aa40bd8d1530b22ef992f66a46911e21d8a0e33cb72cc81f3641e20d49acfacd40ea0146a685dda02b20ab4d7a2dae7ec3984c615372c803ac06809e7c0c93941608f1f1aed8ef2524b6e66f45ef32b24d3b01936bccc7eef6c578bbf1dc9c9df205de0993f4e41d10d1676e7793cc23ad829838ed7e4cba8a9f8a42d6e9cf4c8d313a84cd11c7b8ded001e57fad7fa4bb4d79a", 0xf1}, {&(0x7f00000062c0)="957a3422a6c7d0d73933670199806df72e3a103936d235873b4a02c8df492930c183569ac6af0f2ad8a22130be3077c21e0a229e05bf880732235d36287f0650c0e2cf87135b0dc4aba5ae6a84c391bc7f950c6b6545a23c1e98619fccc5e2a076c4fe43233988b3cdefe161743cec17ac9ca752b0b8a64cd3701691f38b0f5cd07cd4abd211d6e994ce7b6744c0912f9cb9e19185661f5c37ef51793abfbaccbf2a8043ca455356906fc857c59480acf0a8797661e498dcfedeba8110aa503742fd72", 0xc3}, {&(0x7f00000063c0)="7343d5ed4256cb0d0541feccb61f8fb5486aa6c0532de57ee41342a25676704454f88cc5327934fc3cbd1f6975c1677a6e8ac780391e91f95ece1595f48a68c9fae556b67b6a0cf7fecfb8e204f15dea7d0fa00dbfa94d149f5065c79dea8feed3622af999b2b17393e6daa7cb2aa398ed28f6591f54f5de357207a6959aedcd5e11b1ff36c139f206b7a7e978786996663d3ca5cbdcb729f4c535910c2bb10df6ed55cc8903a58ec3fb1e50a3af09bf1cdb03088cb156c183df5e404aa9e7f93b38a4c8d84978bc", 0xc8}], 0x5, &(0x7f0000006640)=[@cred={{0x18, 0x1, 0x2, {r41, r42, r43}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, r1, r0, r1, r0]}}], 0x40, 0x20008040}], 0xa, 0x4000801) 07:19:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x0, 0xffffffffffffff9c}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2100, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000001c0)={0x0, @rand_addr=0x101, 0x4e22, 0x4, 'sh\x00', 0x2, 0x549c, 0x70}, 0x2c) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x8000) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000140)={{0x3f, @rand_addr=0x80000001, 0x4e24, 0x2, 'none\x00', 0x2e, 0x3, 0x2f}, {@multicast1, 0x4e21, 0x10000, 0x3, 0x1, 0x4}}, 0x44) [ 333.682992][T17729] *** Guest State *** [ 333.691431][T17727] *** Guest State *** [ 333.696093][T17729] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 333.713631][T17727] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:36 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4010ae67, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 333.741504][T17727] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 333.753140][T17729] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 333.778977][T17727] CR3 = 0x0000000000000000 07:19:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x800000000000000}) [ 333.788760][T17729] CR3 = 0x0000000000000000 [ 333.794422][T17727] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 333.819050][T17729] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 333.844990][T17727] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 333.867543][T17729] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 333.893722][T17727] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 333.908630][T17729] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 333.919593][T17727] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 333.938100][T17729] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 333.958203][T17727] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.011076][T17729] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.028659][T17727] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.038002][T17729] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.038050][T17729] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.038082][T17729] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.038114][T17729] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.038148][T17729] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 334.038200][T17729] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 334.038225][T17729] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 334.065477][T17727] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.097271][T17727] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.124059][T17727] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 334.141126][T17727] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 334.141589][T17729] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 334.160924][T17729] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 334.166874][T17727] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 334.183083][T17727] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 334.192180][T17727] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 334.195840][T17729] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 334.201232][T17727] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 334.209634][T17729] Interruptibility = 00000000 ActivityState = 00000000 [ 334.222508][T17727] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 334.224496][T17729] *** Host State *** [ 334.232415][T17727] Interruptibility = 00000000 ActivityState = 00000000 [ 334.237423][T17729] RIP = 0xffffffff811b4620 RSP = 0xffff88805e5ff998 [ 334.248835][T17727] *** Host State *** [ 334.250725][T17729] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 334.254660][T17727] RIP = 0xffffffff811b4620 RSP = 0xffff888060b67998 [ 334.261844][T17729] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 334.268553][T17727] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 334.277852][T17729] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 334.291974][T17729] CR0=0000000080050033 CR3=000000009f9cf000 CR4=00000000001426e0 [ 334.300391][T17729] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 334.303883][T17727] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 334.308346][T17729] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 334.323393][T17729] *** Control State *** [ 334.328022][T17729] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 334.335330][T17727] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 334.335741][T17729] EntryControls=0000d1ff ExitControls=002befff [ 334.342043][T17727] CR0=0000000080050033 CR3=0000000094401000 CR4=00000000001426e0 [ 334.348499][T17729] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 334.360695][T17727] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 334.364027][T17729] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 334.371150][T17727] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 334.378802][T17729] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 334.391962][T17727] *** Control State *** [ 334.393855][T17729] reason=80000021 qualification=0000000000000000 [ 334.397640][T17727] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 334.404667][T17729] IDTVectoring: info=00000000 errcode=00000000 [ 334.417662][T17727] EntryControls=0000d1ff ExitControls=002befff [ 334.418766][T17729] TSC Offset = 0xffffff4b7d9623c9 [ 334.429103][T17727] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 334.429387][T17729] EPT pointer = 0x000000002466901e [ 334.436836][T17727] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 334.454231][T17727] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 07:19:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:19:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x401845c0, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x1f00000000000000}) 07:19:37 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0xfffffffffffffe77) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000240)=r4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000002c0)=0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2}}, 0x10) signalfd4(r0, &(0x7f0000000300)={0x8}, 0x8, 0x80800) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000080)) dup2(r0, r1) 07:19:37 executing program 1: socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, 0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x4, &(0x7f00000035c0)=[0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getpgid(0x0) getresuid(0x0, &(0x7f0000000840), &(0x7f0000000640)) gettid() stat(0x0, &(0x7f0000003840)) getpgid(0x0) getuid() geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000038c0), &(0x7f0000003900)=0xc) getresuid(0x0, &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)) sendmmsg$unix(r0, 0x0, 0x0, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = creat(0x0, 0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980), 0x4) r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x39, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040740000000000000000000000000000000000000000000000000000000000000018000000000000000800000000", @ANYPTR64], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) [ 334.461621][T17727] reason=80000021 qualification=0000000000000000 [ 334.471971][T17727] IDTVectoring: info=00000000 errcode=00000000 [ 334.479997][T17727] TSC Offset = 0xffffff4b7d88397d [ 334.488589][T17727] EPT pointer = 0x0000000096edb01e [ 334.571670][T17764] QAT: Invalid ioctl 07:19:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x401870cb, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:37 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x4000000000000000}) [ 334.697229][T17774] QAT: Invalid ioctl [ 334.744515][T17771] *** Guest State *** [ 334.753994][T17771] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 334.807766][T17785] *** Guest State *** [ 334.818916][T17771] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 334.834772][T17785] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 07:19:38 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0xc0000, 0x0) close(r0) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40008003, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x86}}], 0x50) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x9, @vbi={0x0, 0x0, 0x32344d59}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0xbdf1, 0x4) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) 07:19:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4020565b, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:38 executing program 1: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) flock(r0, 0x9) r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x101000000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x0, 0x6c1, 0x80}) [ 334.861589][T17771] CR3 = 0x0000000000000000 [ 334.879723][T17785] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 334.889591][T17771] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 334.907323][T17785] CR3 = 0x0000000000000000 07:19:38 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xfdfdffff00000000}) [ 334.911968][T17771] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 334.923532][T17785] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 334.938646][T17771] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 334.950280][T17785] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 334.981846][T17785] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 335.009264][T17771] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 335.030885][T17785] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 335.041748][T17771] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.073927][T17785] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.082865][T17771] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.092500][T17785] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.101741][T17771] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.113949][T17785] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.123959][T17771] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.154625][T17785] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.163614][T17771] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.200517][T17771] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 335.203447][T17785] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 335.217133][T17771] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 335.238930][T17785] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 335.247801][T17771] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 335.261897][T17771] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 335.265497][T17785] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 335.276665][T17771] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 335.279797][T17785] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 335.293270][T17771] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 335.304441][T17771] Interruptibility = 00000000 ActivityState = 00000000 [ 335.308382][T17785] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 335.311595][T17771] *** Host State *** [ 335.324442][T17771] RIP = 0xffffffff811b4620 RSP = 0xffff888060b67998 [ 335.325541][T17785] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 335.331381][T17771] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 335.341421][T17785] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 335.346438][T17771] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 335.360394][T17785] Interruptibility = 00000000 ActivityState = 00000000 [ 335.363140][T17771] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 335.372159][T17785] *** Host State *** [ 335.376981][T17771] CR0=0000000080050033 CR3=0000000092bb0000 CR4=00000000001426e0 [ 335.385980][T17785] RIP = 0xffffffff811b4620 RSP = 0xffff88805d08f998 [ 335.388856][T17771] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 335.397134][T17785] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 335.405507][T17771] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 335.415119][T17785] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 335.416956][T17771] *** Control State *** [ 335.425584][T17785] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 335.431913][T17771] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 335.436438][T17785] CR0=0000000080050033 CR3=0000000090627000 CR4=00000000001426e0 [ 335.445918][T17771] EntryControls=0000d1ff ExitControls=002befff [ 335.451601][T17785] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 335.461174][T17771] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 335.465914][T17785] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 335.473447][T17771] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 335.479701][T17785] *** Control State *** [ 335.491425][T17771] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 335.491520][T17785] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 335.498951][T17771] reason=80000021 qualification=0000000000000000 [ 335.506713][T17785] EntryControls=0000d1ff ExitControls=002befff [ 335.518225][T17771] IDTVectoring: info=00000000 errcode=00000000 [ 335.519679][T17785] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 335.525737][T17771] TSC Offset = 0xffffff4ae3fcfeda [ 335.525746][T17771] EPT pointer = 0x000000008cd2f01e [ 335.534438][T17785] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 07:19:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:38 executing program 0: epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) unshare(0x4040800) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 07:19:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4020940d, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:38 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xfdffffff00000000}) 07:19:38 executing program 1: mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480), 0xfffffeae) read$FUSE(0xffffffffffffffff, 0x0, 0x169eeced11646c89) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x29, 0x1, {0xfffffffffffffffd}}, 0xb) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_settings={0x9e37, 0x40, @fr=&(0x7f0000000040)={0x8, 0x1, 0x4, 0x1, 0xdff, 0x20004000000, 0x12b}}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 335.562612][T17785] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 335.579660][T17785] reason=80000021 qualification=0000000000000000 [ 335.607946][T17785] IDTVectoring: info=00000000 errcode=00000000 [ 335.633402][T17785] TSC Offset = 0xffffff4ad44715cd [ 335.672176][T17785] EPT pointer = 0x000000008a2b301e 07:19:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:38 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xff00000000000000}) 07:19:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xd1, 0x200000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r3, 0xcaa0, 0x2, [0x0, 0x8]}, 0xc) fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xfffffffffffffc01, 0x401}, {0x8000, 0x8001}]}, 0x14, 0x2) r4 = dup2(r1, r1) write$FUSE_OPEN(r4, &(0x7f0000000200)={0x20}, 0x20) 07:19:38 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1000000000800000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40096100, &(0x7f0000000080)) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x7fff}}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100)) 07:19:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4028af11, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 335.751453][T17817] *** Guest State *** [ 335.840158][T17817] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 335.883894][T17817] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 335.912849][T17825] *** Guest State *** 07:19:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x402c5342, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:39 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xff03000000000000}) [ 335.932492][T17817] CR3 = 0x0000000000000000 [ 335.940821][T17825] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 335.951341][T17833] QAT: Invalid ioctl [ 335.969635][T17817] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 335.983072][T17833] QAT: Invalid ioctl [ 335.995389][T17817] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 336.002307][T17825] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 336.008570][T17833] QAT: Invalid ioctl [ 336.053707][T17817] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 336.073657][T17825] CR3 = 0x0000000000000000 [ 336.087811][T17825] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 336.099770][T17817] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 336.110063][T17825] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 336.132347][T17817] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.141892][T17825] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 336.150973][T17825] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 336.160368][T17817] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.174273][T17825] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.195852][T17817] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.205349][T17825] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.214569][T17817] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.227716][T17825] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.248427][T17817] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.257850][T17825] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.267136][T17825] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 336.275937][T17817] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 336.276299][T17825] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 336.289886][T17817] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 336.293798][T17825] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 336.302467][T17817] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 336.311327][T17825] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 336.311345][T17825] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 336.311355][T17825] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 336.311366][T17825] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 336.311376][T17825] Interruptibility = 00000000 ActivityState = 00000000 [ 336.311380][T17825] *** Host State *** [ 336.311392][T17825] RIP = 0xffffffff811b4620 RSP = 0xffff88808940f998 [ 336.311413][T17825] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 336.311425][T17825] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 336.311436][T17825] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 336.311449][T17825] CR0=0000000080050033 CR3=0000000090b68000 CR4=00000000001426e0 [ 336.311463][T17825] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 336.311474][T17825] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 336.311479][T17825] *** Control State *** [ 336.311488][T17825] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 336.311505][T17825] EntryControls=0000d1ff ExitControls=002befff [ 336.327632][T17817] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 336.329602][T17825] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 336.340232][T17817] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 336.345205][T17825] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 336.353464][T17817] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 336.353491][T17817] Interruptibility = 00000000 ActivityState = 00000000 [ 336.353525][T17817] *** Host State *** [ 336.364566][T17817] RIP = 0xffffffff811b4620 RSP = 0xffff888087437998 [ 336.376804][T17825] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 336.393715][T17817] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 336.407685][T17825] reason=80000021 qualification=0000000000000000 [ 336.411473][T17817] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 336.421420][T17825] IDTVectoring: info=00000000 errcode=00000000 [ 336.427407][T17817] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 336.433864][T17825] TSC Offset = 0xffffff4a3d453f8e [ 336.442502][T17817] CR0=0000000080050033 CR3=00000000a8cc0000 CR4=00000000001426f0 [ 336.450449][T17825] EPT pointer = 0x0000000095e4201e [ 336.464810][T17817] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 336.485800][T17817] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 336.501710][T17817] *** Control State *** [ 336.561155][T17817] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 336.578030][T17817] EntryControls=0000d1ff ExitControls=002befff [ 336.584267][T17817] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 336.591895][T17817] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 336.599349][T17817] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 07:19:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r3 = socket$inet(0x2, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r4, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00\x00t6_\xbc\x89e\x9b\xf8\xed') exit(0x0) execveat(r7, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) accept4$unix(r5, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) 07:19:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x402c5828, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 07:19:39 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0xffffffffffffffff}) 07:19:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 336.606684][T17817] reason=80000021 qualification=0000000000000000 [ 336.613785][T17817] IDTVectoring: info=00000000 errcode=00000000 [ 336.619927][T17817] TSC Offset = 0xffffff4a5858137f [ 336.624983][T17817] EPT pointer = 0x000000009314001e [ 336.757097][T17848] *** Guest State *** 07:19:39 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x402c582a, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x2}) [ 336.787375][T17848] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 336.807435][T17848] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 336.822905][T17848] CR3 = 0x0000000000000000 [ 336.828346][T17848] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd 07:19:40 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000001800000000000000000000000000200002000000000000000000000001000000000000000000f8ffffff00000500"/88], 0x58) close(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) uselib(&(0x7f0000000000)='./file0\x00') [ 336.837598][T17861] *** Guest State *** [ 336.840551][T17848] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 336.862056][T17861] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 336.923727][T17848] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 336.934973][T17861] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 336.961267][T17848] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 07:19:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x3}) 07:19:40 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4068aea3, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 336.979234][T17861] CR3 = 0x0000000000000000 [ 336.990774][T17861] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 337.000930][T17848] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.022000][T17861] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 337.041381][T17861] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 337.063036][T17848] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.072192][T17861] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 07:19:40 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000400)={0x3, 0x655}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000084356961b67a68c0953e87deb652d65b129c5e4254c4800f3a321954deec744b226df803b7bd90f7423fb053c4af87144db7499fee93d7f7f3ab5440183d3e1bc8232bf4889327115b1a2ede22fdb4af697b3abb68ba118a15e08dbfae7973c0c950d1072e3794eec9a7d02365a6431e"], 0x28}}, 0x0) [ 337.108079][T17861] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.108371][T17848] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.136518][T17848] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.143058][T17861] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.181168][T17861] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.191267][T17848] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.222062][T17848] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 337.247283][T17861] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.259006][T17848] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 337.273492][T17848] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 337.282396][T17848] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 337.311259][T17848] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 337.312366][T17861] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 337.327652][T17848] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 337.343599][T17861] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 337.362701][T17880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.372229][T17848] Interruptibility = 00000000 ActivityState = 00000000 [ 337.372236][T17848] *** Host State *** [ 337.372248][T17848] RIP = 0xffffffff811b4620 RSP = 0xffff88808940f998 [ 337.372269][T17848] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 337.372280][T17848] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 337.372291][T17848] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 337.372304][T17848] CR0=0000000080050033 CR3=0000000089502000 CR4=00000000001426e0 [ 337.372318][T17848] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 337.372329][T17848] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 337.372334][T17848] *** Control State *** [ 337.372343][T17848] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 337.372351][T17848] EntryControls=0000d1ff ExitControls=002befff [ 337.372363][T17848] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.372372][T17848] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 337.372381][T17848] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 337.372389][T17848] reason=80000021 qualification=0000000000000000 [ 337.372397][T17848] IDTVectoring: info=00000000 errcode=00000000 [ 337.372403][T17848] TSC Offset = 0xffffff49c910a2fe [ 337.372412][T17848] EPT pointer = 0x000000009b4fd01e [ 337.372660][T17861] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 337.372694][T17861] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 337.372745][T17861] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 337.372776][T17861] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 337.372843][T17861] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 337.372909][T17861] Interruptibility = 00000000 ActivityState = 00000000 [ 337.372953][T17861] *** Host State *** [ 337.372996][T17861] RIP = 0xffffffff811b4620 RSP = 0xffff88805c06f998 [ 337.373258][T17861] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 337.465194][T17861] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 337.540682][T17861] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 337.637282][T17861] CR0=0000000080050033 CR3=000000008bc21000 CR4=00000000001426f0 [ 337.650112][T17861] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 337.657659][T17861] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 337.664892][T17861] *** Control State *** [ 337.669240][T17861] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 337.678516][T17861] EntryControls=0000d1ff ExitControls=002befff [ 337.684823][T17861] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 337.692522][T17861] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 337.700507][T17861] VMExit: intr_info=00000000 errcode=00000000 ilen=00000004 [ 337.709073][T17861] reason=80000021 qualification=0000000000000000 [ 337.717459][T17861] IDTVectoring: info=00000000 errcode=00000000 [ 337.724442][T17861] TSC Offset = 0xffffff49c288ab43 [ 337.729548][T17861] EPT pointer = 0x00000000a63c201e 07:19:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x4}) 07:19:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x147700, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0xc) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@mcast2, r3}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup2(r4, r1) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x8090ae81, &(0x7f0000000340)={0x0, 0x0, 0x2080}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000023c0)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_to_hsr\x00', 0x10) 07:19:41 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4070aea0, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xa0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x8) 07:19:41 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x5}) 07:19:41 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x6}) 07:19:41 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x800448d2, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xa0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x8) 07:19:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 338.152052][T17904] *** Guest State *** [ 338.191740][T17904] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 338.252576][T17904] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 338.329335][T17904] CR3 = 0x0000000000000000 07:19:41 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045104, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 338.362279][T17904] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 338.383819][T17904] RFLAGS=0x00000002 DR7 = 0x0000000000000400 07:19:41 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x80000) fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0xd000]}]}, 0x44}}, 0x0) 07:19:41 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x7}) [ 338.407842][T17904] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 07:19:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 338.451738][T17904] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 338.509147][T17904] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 338.557253][T17904] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 338.600384][T17904] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 338.631853][T17904] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 338.670926][T17904] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 338.710821][T17904] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 338.721618][T17904] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 338.731550][T17904] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 338.741265][T17904] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 338.750315][T17904] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 338.758068][T17904] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 338.766578][T17904] Interruptibility = 00000000 ActivityState = 00000000 [ 338.773842][T17904] *** Host State *** [ 338.777946][T17904] RIP = 0xffffffff811b4620 RSP = 0xffff8880571bf998 [ 338.784903][T17904] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 338.792046][T17904] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 338.800974][T17904] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 338.808355][T17904] CR0=0000000080050033 CR3=00000000a066e000 CR4=00000000001426e0 [ 338.816321][T17904] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 338.823809][T17904] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 338.830589][T17904] *** Control State *** [ 338.834836][T17904] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 338.842290][T17904] EntryControls=0000d1ff ExitControls=002befff [ 338.848561][T17904] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 338.856234][T17904] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 338.863634][T17904] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 07:19:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xa0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x8) 07:19:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x05I\xe6\x84\xf6\x00\xa0\x00', 0x802}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x44000, 0x80) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0xf7, 0x24, 0x1, r4}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1000030a) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 07:19:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x8}) 07:19:42 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045105, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 338.870902][T17904] reason=80000021 qualification=0000000000000000 [ 338.877971][T17904] IDTVectoring: info=00000000 errcode=00000000 [ 338.884205][T17904] TSC Offset = 0xffffff491190f755 [ 338.889228][T17904] EPT pointer = 0x000000008ea0e01e 07:19:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xa0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x8) 07:19:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x300}) [ 339.031747][T17946] *** Guest State *** 07:19:42 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8004510a, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 339.098775][T17946] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 339.112434][T17950] *** Guest State *** [ 339.125526][T17946] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 339.139671][T17950] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 339.173623][T17946] CR3 = 0x0000000000000000 [ 339.179058][T17946] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 339.194058][T17950] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 339.204371][T17946] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 339.211328][T17950] CR3 = 0x0000000000000000 [ 339.216347][T17950] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd 07:19:42 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x500}) 07:19:42 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8004510b, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 339.223857][T17946] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 339.231475][T17950] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 339.238693][T17950] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 339.247483][T17946] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 339.256934][T17950] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 339.266577][T17946] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.276014][T17950] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.286092][T17946] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.295393][T17950] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.304794][T17946] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.314018][T17950] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.322958][T17950] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.332509][T17946] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.386960][T17950] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 339.398838][T17946] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:42 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045113, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 339.428148][T17950] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 339.439574][T17946] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 339.456337][T17950] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 339.474098][T17946] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 339.487320][T17950] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 339.503594][T17946] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 339.534455][T17950] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 339.540521][T17946] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 339.560792][T17950] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 339.568260][T17946] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 339.571630][T17950] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 339.604995][T17946] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 339.613674][T17950] Interruptibility = 00000000 ActivityState = 00000000 [ 339.627676][T17950] *** Host State *** [ 339.639067][T17946] Interruptibility = 00000000 ActivityState = 00000000 [ 339.640127][T17950] RIP = 0xffffffff811b4620 RSP = 0xffff88805a5a7998 [ 339.647107][T17946] *** Host State *** [ 339.657362][T17946] RIP = 0xffffffff811b4620 RSP = 0xffff88805bd4f998 [ 339.665211][T17946] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 339.672560][T17946] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 339.673640][T17950] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 339.681787][T17946] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 339.697266][T17950] FSBase=0000000000000000 GSBase=ffff8880ae800000 TRBase=fffffe000003c000 [ 339.697281][T17946] CR0=0000000080050033 CR3=000000009e9ae000 CR4=00000000001426e0 [ 339.697310][T17946] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201340 [ 339.706245][T17950] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 339.721852][T17946] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 339.740671][T17946] *** Control State *** [ 339.742368][T17950] CR0=0000000080050033 CR3=000000008dca7000 CR4=00000000001426f0 [ 339.756075][T17950] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 339.764159][T17950] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 339.776459][T17950] *** Control State *** [ 339.779844][T17946] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 339.786388][T17950] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 339.805538][T17950] EntryControls=0000d1ff ExitControls=002befff [ 339.811878][T17950] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 339.818579][T17946] EntryControls=0000d1ff ExitControls=002befff [ 339.820170][T17950] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 339.827155][T17946] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 339.841028][T17950] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 339.870994][T17946] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 339.873415][T17950] reason=80000021 qualification=0000000000000000 [ 339.879949][T17946] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 339.899186][T17946] reason=80000021 qualification=0000000000000000 [ 339.901165][T17950] IDTVectoring: info=00000000 errcode=00000000 [ 339.924466][T17946] IDTVectoring: info=00000000 errcode=00000000 [ 339.934158][T17950] TSC Offset = 0xffffff4889a980c5 [ 339.938719][T17946] TSC Offset = 0xffffff489522ca7c [ 339.958617][T17950] EPT pointer = 0x000000008eeca01e [ 339.959547][T17946] EPT pointer = 0x000000008f80a01e 07:19:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x600}) [ 340.202304][T17980] *** Guest State *** [ 340.206688][T17980] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 340.216692][T17980] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 340.226588][T17980] CR3 = 0x0000000000000000 [ 340.231255][T17980] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 340.238507][T17980] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 340.245575][T17980] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 340.253200][T17980] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 340.262282][T17980] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 340.271393][T17980] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 340.280531][T17980] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 340.289542][T17980] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 340.298733][T17980] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 340.307716][T17980] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 340.316710][T17980] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 340.325511][T17980] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 340.325560][T17980] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 340.325584][T17980] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 340.325609][T17980] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 340.325658][T17980] Interruptibility = 00000000 ActivityState = 00000000 [ 340.325685][T17980] *** Host State *** [ 340.325724][T17980] RIP = 0xffffffff811b4620 RSP = 0xffff888057277998 [ 340.343220][T17980] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 340.358569][T17980] FSBase=0000000000000000 GSBase=ffff8880ae900000 TRBase=fffffe000003c000 [ 340.358603][T17980] GDTBase=fffffe000003a000 IDTBase=fffffe0000000000 [ 340.358637][T17980] CR0=0000000080050033 CR3=00000000916cf000 CR4=00000000001426e0 [ 340.376297][T17980] Sysenter RSP=fffffe000003b200 CS:RIP=0010:ffffffff87201340 [ 340.392309][T17980] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 340.406706][T17980] *** Control State *** [ 340.406744][T17980] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 340.406768][T17980] EntryControls=0000d1ff ExitControls=002befff [ 340.406811][T17980] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 340.421069][T17980] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 340.432891][T17980] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 340.446833][T17980] reason=80000021 qualification=0000000000000000 [ 340.461726][T17980] IDTVectoring: info=00000000 errcode=00000000 [ 340.475056][T17980] TSC Offset = 0xffffff47f2ac938c [ 340.480304][T17980] EPT pointer = 0x00000000a3d7d01e 07:19:43 executing program 1: syz_execute_func(&(0x7f00000001c0)="1c18b5b598cd801b69e4f56962f5696200d9d9d0b93b795b69f9263e660f73de8a680c0000008fe9589b26c7e4c753fbc4f1e1fed4f47d82663ed10740df36f216657051c422b18cb6070000005151ccc4a27d181e1eea01eff265dc5f003e460fc37d105bc4417d100045e145af35af353541000f9a9999030f0f15f5e42c240f54635bde3ef3407104a1e1e0ef26400f0d18c401fe5ff6e30fad6736660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d00008066660f3a0b0865") r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101200, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) 07:19:43 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x800454d2, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) 07:19:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xa0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) 07:19:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@dev, @empty}, &(0x7f0000000100)=0x22f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:19:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x700}) 07:19:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000640)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb2) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9}, &(0x7f0000000140)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x20000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0xb, 0x1ec], 0xfffffffffffffffd}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 340.739534][T17986] *** Guest State *** 07:19:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xa0) 07:19:43 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80085504, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 340.761442][T17986] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 340.762220][T17991] *** Guest State *** 07:19:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x1f00}) [ 340.807214][T17986] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 07:19:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x82002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e00)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000e40)={@empty, 0x5f, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x41) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a62730000000000000000000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="00b500000000000000000000842a7470c3ee0000", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/10], @ANYBLOB='\n\x00'/24], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000001800000000000000300000000080200054759c230aae5bec66bd1699af75a022b55719db5d5e4033402ca685ce967b12bd05297d8e6be8bbec338bfd5ec8f532dff42c1d732d9fff9a04fdba181ceb39a719075c7801ff697f79aaa5cb588184491b4c365f443eead92e7b58d8cb6c6f47b94ff953dcf46e5711a48a4a7986d1"], @ANYBLOB="1000000000000000"], 0x0, 0x0, &(0x7f0000000300)}) pwritev(r0, &(0x7f00000007c0)=[{&(0x7f0000000440)="6211e11707286414c3b73da609c617ab074a62d4a6be3d35915d93b9251b8c340f3301feb0fa7fbf30b6e9282cf2ea16eca05df3c7c8acaf4023255ef74345dc6a5fafdba230580c594ab2a84db56edbdd20b54ef70ad89f5aaacea4c53b4b3a646a8289336030270eb421782710635a026d62a345b2875d41a85492f249f7c4b28c", 0x82}, {&(0x7f0000000500)="dc337de97ab48782c55b9d8fe5dab8cb6ca84b2889e85531d67be7fd2fb0b91ed791b5c2b7c0c8e6270688fb6108eeadb7192a621ecaedd7d3927175f530bcd4a84122e4dde8e580084e805fada636998b4ee358abfbef33d708d37ece5eec6eef58515a6505cc1740a712bb1cb82fc8723d4dbe34e448188f43f77592c30d77d763f12674234403e99fdb1c949618797d894a91698147694d005503a2cd4f04d62da55903e0b6366e6d42a55a8300d5ea0c55e6a72559d4b907eaa9a667dbd984cce37e57f3b6e1d422ded4320fb13eff983fcda739fc7981f5b4f9a9dbadee2f380a4a150ee99aea038a", 0xeb}, {&(0x7f0000000600)="903df7810e4153187d22d07dccea8c2b6e06e5467a36ac269a6149cabb4332fd862a380aab264aea8a3fc47631b24fd9994e8a78b5a09d250c60dff1684dba454a689377b41402eb00f48cacd41e7774c6f4d735a7954bd9b62162d1f0396a270fb000c6b54f83dd83e97ec3a9fb9ba2fa4eb576888a71b2576835f57153f77904b7c771dc9a75b23b2c5b7f92ebea97100793deac947784de9cf583b1", 0x9d}, {&(0x7f0000000340)="4d58f05d35a76479f61eb97e6f29ee3d6af144a296de2c1fd86145ab9f05b270b47c39492392289667626b820d8d9458f7f3b7b731778c", 0x37}, {&(0x7f00000006c0)="8c0864607f2a7452a59cd85d3dbee26e055685f0b64916daa3135cf70b4e43c3902dfcfe5b7e816c2c64ca68dece3405261e13bebc524d8bbcb7b2c52a7b446f0de66a6c477ff237b294879e5b0b1edea726341bf30e9fb6834563f5d8f3373fada05351689dd0a3262ad3606e41eb48", 0x70}, {&(0x7f0000000740)="d3cf4479ab99bb8668357b121157e7af42811ab9787b357750e9ddcc001927837d618712ece37eaf2f040b5f49451b538ed6546d67f6019e1273c7e32de41cf3a104b198db497c33945a3d986332e37af3f4d845c821", 0x56}], 0x6, 0x0) [ 340.867088][T17991] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 340.903827][T17991] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 340.913955][T17986] CR3 = 0x0000000000000000 [ 340.913987][T17986] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 340.914018][T17986] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 340.914104][T17986] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 340.914158][T17986] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 340.943232][T17991] CR3 = 0x0000000000000000 07:19:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffe0}, 0x0, 0x4000}) 07:19:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="009c46007fff000000008a00adf3967bd47734b24296e987fded4fabc93d9f9c4a9a24594a457fc9687022569bded118772a3b5d888db1f503d3f81e40d923f1e10b9b38dea00a048eb2633ebaec5f08507d84f5c1ecfe4f1dd0d5d4851098045c65e356c0f8db62c2d1f436b25ad556257851fe7c3d2ea57da6e32913d5aff620ffb0ee6eef5debbc8152f947749f752dee7ac7016cb8a6ec0b0906eb25c1ea9cb193a5cbfaf4ee627c8e0d2bd2300fc4a8a06d0c638294a8bcf194aca8b7ce836faec0e45e8fbb865b55e8ed223ba6fda4ae741494727284749f8d182b4a199616650d0e1b9bace65dbe8c0d1232b1e01e783e00"/260]}) [ 340.965956][T17986] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 340.981132][T17986] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 07:19:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80086301, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}}) [ 341.011996][T17991] RSP = 0x0000000000000000 RIP = 0xfffffffffffffffd [ 341.023554][T17986] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 341.072756][T17991] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 341.100051][T17986] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 341.115113][T18008] WARNING: CPU: 1 PID: 18008 at drivers/android/binder.c:2368 binder_transaction_buffer_release+0x673/0x8f0 [ 341.126611][T18008] Kernel panic - not syncing: panic_on_warn set ... [ 341.133198][T18008] CPU: 1 PID: 18008 Comm: syz-executor.1 Not tainted 5.1.0+ #19 [ 341.140818][T18008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.151448][T18008] Call Trace: [ 341.154745][T18008] dump_stack+0x172/0x1f0 [ 341.159074][T18008] ? binder_transaction_buffer_release+0x660/0x8f0 [ 341.165568][T18008] panic+0x2cb/0x715 [ 341.169455][T18008] ? __warn_printk+0xf3/0xf3 [ 341.174042][T18008] ? binder_transaction_buffer_release+0x673/0x8f0 [ 341.180533][T18008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.186769][T18008] ? __warn.cold+0x5/0x4c [ 341.191096][T18008] ? binder_transaction_buffer_release+0x673/0x8f0 [ 341.197591][T18008] __warn.cold+0x20/0x4c [ 341.201829][T18008] ? binder_transaction_buffer_release+0x673/0x8f0 [ 341.208326][T18008] report_bug+0x263/0x2b0 [ 341.212650][T18008] do_error_trap+0x11b/0x200 [ 341.217234][T18008] do_invalid_op+0x37/0x50 [ 341.221641][T18008] ? binder_transaction_buffer_release+0x673/0x8f0 [ 341.229956][T18008] invalid_op+0x14/0x20 [ 341.234107][T18008] RIP: 0010:binder_transaction_buffer_release+0x673/0x8f0 [ 341.241203][T18008] Code: 31 ff 41 89 c5 89 c6 e8 7b 04 1f fc 45 85 ed 0f 85 1f 41 01 00 49 8d 47 40 48 89 85 50 fe ff ff e9 9d fa ff ff e8 dd 02 1f fc <0f> 0b e9 7f fc ff ff e8 d1 02 1f fc 48 89 d8 45 31 c9 4c 89 fe 4c [ 341.260811][T18008] RSP: 0018:ffff88808529f5f0 EFLAGS: 00010216 [ 341.266866][T18008] RAX: 0000000000040000 RBX: 0000000000000060 RCX: ffffc90007ffa000 [ 341.274831][T18008] RDX: 0000000000008183 RSI: ffffffff85519e13 RDI: ffff8880a7bcdb88 [ 341.282795][T18008] RBP: ffff88808529f7d8 R08: ffff88805b926480 R09: ffffed1010a53ee3 [ 341.290759][T18008] R10: ffffed1010a53ee2 R11: ffff88808529f717 R12: ffff888059022340 [ 341.298722][T18008] R13: 0000000000000068 R14: ffff88808529f7b0 R15: ffff8880a47b0200 [ 341.306703][T18008] ? binder_transaction_buffer_release+0x673/0x8f0 [ 341.313210][T18008] ? binder_update_ref_for_handle+0x490/0x490 [ 341.319282][T18008] ? trace_hardirqs_off+0x62/0x220 [ 341.324388][T18008] ? kfree+0x170/0x220 [ 341.328449][T18008] ? binder_free_txn_fixups+0x15f/0x230 [ 341.333990][T18008] ? trace_hardirqs_on+0x67/0x220 [ 341.339011][T18008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.345243][T18008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.351488][T18008] binder_transaction+0x153d/0x6620 [ 341.356702][T18008] ? binder_thread_read+0x3d00/0x3d00 [ 341.362070][T18008] ? mark_held_locks+0xf0/0xf0 [ 341.366828][T18008] ? save_stack+0x23/0x90 [ 341.371154][T18008] ? __might_fault+0x12b/0x1e0 [ 341.375928][T18008] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.382163][T18008] ? _copy_from_user+0xdd/0x150 [ 341.387010][T18008] binder_thread_write+0x87e/0x2820 [ 341.392199][T18008] ? mark_held_locks+0xf0/0xf0 [ 341.396953][T18008] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.403195][T18008] ? binder_transaction+0x6620/0x6620 [ 341.408555][T18008] ? __might_fault+0x12b/0x1e0 [ 341.413331][T18008] ? lock_downgrade+0x880/0x880 [ 341.418183][T18008] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.424412][T18008] ? _copy_from_user+0xdd/0x150 [ 341.429264][T18008] binder_ioctl+0x102f/0x1833 [ 341.433944][T18008] ? binder_thread_write+0x2820/0x2820 [ 341.439393][T18008] ? __fget+0x381/0x550 [ 341.443547][T18008] ? ksys_dup3+0x3e0/0x3e0 [ 341.447955][T18008] ? get_old_timespec32+0x200/0x200 [ 341.453158][T18008] ? tomoyo_file_ioctl+0x23/0x30 [ 341.458085][T18008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.464322][T18008] ? security_file_ioctl+0x8d/0xc0 [ 341.469424][T18008] ? binder_thread_write+0x2820/0x2820 [ 341.474876][T18008] __ia32_compat_sys_ioctl+0x195/0x620 [ 341.480339][T18008] do_fast_syscall_32+0x27b/0xd7d [ 341.485363][T18008] entry_SYSENTER_compat+0x70/0x7f [ 341.490463][T18008] RIP: 0023:0xf7fe4849 [ 341.494527][T18008] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 341.514116][T18008] RSP: 002b:00000000f5de00cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 341.522517][T18008] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 341.530476][T18008] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.538453][T18008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.546414][T18008] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 341.554375][T18008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.564127][T18008] Kernel Offset: disabled [ 341.568461][T18008] Rebooting in 86400 seconds..