0080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff}) 22:35:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 22:35:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000000000000, 0xffff8000]}]}}) 22:35:10 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x87\xff', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:10 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 22:35:10 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xfcffffff) 22:35:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 22:35:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x3f00}]}}) 22:35:11 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff}) 22:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 22:35:11 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:11 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}) 22:35:11 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7}) 22:35:11 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000, 0xffff8000]}]}}) 22:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) 22:35:11 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}) 22:35:11 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xffc99a3b) 22:35:11 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x4000}]}}) 22:35:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xe7]}) 22:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5) 22:35:12 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x320]}) 22:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6) 22:35:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2003]}) 22:35:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8002]}]}}) 22:35:12 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 22:35:12 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xfffffffc) 22:35:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xe7ff]}) 22:35:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80ffff}]}}) 22:35:12 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfd]}) 22:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 22:35:12 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:13 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffe7]}) 22:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10) 22:35:13 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) 22:35:13 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1000000]}) 22:35:13 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xfcffffff00000000) 22:35:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x2}]}}) 22:35:13 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x1000000}]}}) 22:35:13 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2000000]}) 22:35:13 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xffc99a3b00000000) 22:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x48) 22:35:13 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\f\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:13 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x20030000]}) 22:35:13 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x2001c0) read$eventfd(r1, &(0x7f0000000040), 0x8) poll(&(0x7f00000003c0)=[{r0, 0x1000000000}], 0x1, 0x0) close(r0) 22:35:14 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xe7ffffff]}) 22:35:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4c) 22:35:14 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x81) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000040)={0x18}, 0x18) 22:35:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x3f00}]}}) 22:35:14 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x2000000}]}}) 22:35:14 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}) 22:35:14 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) 22:35:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60) 22:35:14 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:14 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) getpeername(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000140)=0x80) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), 0x4) 22:35:14 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}) 22:35:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x68) 22:35:14 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00J\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:15 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0), 0x0, 0x1) 22:35:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x4000}]}}) 22:35:15 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffe7]}) 22:35:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x3f000000}]}}) 22:35:15 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8100, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x400) poll(&(0x7f00000003c0)=[{r0}], 0x2000000000000141, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000040)=""/28, &(0x7f0000000080)=0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000001c0)=0x8) 22:35:15 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6c) 22:35:15 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000000000000]}) [ 3147.390576][T13566] dlm: non-version read from control device 114 [ 3147.420262][T13576] dlm: non-version read from control device 114 22:35:15 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x1fff, 0x0) ioctl$TIOCCONS(r1, 0x541d) prctl$PR_SET_TSC(0x1a, 0x1) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffffd, 0x401, 0x1, 0xe04, 0x800}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0x0, @empty, 0x401}, {0xa, 0x4e21, 0x9a, @remote, 0x6}, 0x8, [0x1, 0x5e, 0x9, 0x0, 0x9, 0x5f, 0x100000000, 0x20]}, 0x5c) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/222) 22:35:15 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x200000000000000]}) 22:35:15 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x3, 0x20a, 0x2, 0x5, 0x1, 0x7, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x8005, 0x2, 0x7, r3}, &(0x7f00000001c0)=0x10) 22:35:15 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2003000000000000]}) 22:35:15 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x80ffff}]}}) 22:35:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x74) 22:35:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x40000000}]}}) 22:35:16 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xe7ffffffffffffff]}) 22:35:16 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x400}}, [0xfff, 0x9a, 0x9, 0x1, 0x4d7, 0x8, 0x0, 0x9, 0x7fff, 0x3, 0x101, 0x40, 0x6, 0x2, 0x400]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xe4, 0xffffffff, 0x80000001}, &(0x7f0000000140)=0x10) 22:35:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7a) 22:35:16 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:16 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff00000000]}) 22:35:16 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xe2, 0x40c0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x100000001}, 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) 22:35:16 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffffffffffff]}) 22:35:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 22:35:16 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x20) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x0, 0x4000, 0xffffffff, 0x0, 0x10000}) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x1000000}]}}) 22:35:17 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfdfdffff}]}}) 22:35:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffdfd]}) 22:35:17 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x80, 0x0, 0x7, [{0x5, 0x40, 0x2, 0xff, '.('}, {0x0, 0x4, 0xa, 0x8000, '/dev/cuse\x00'}, {0x4, 0x20, 0xa, 0x1ff, '/dev/cuse\x00'}]}, 0x80) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 22:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 22:35:17 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffffffffffe7]}) 22:35:17 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xa, 0xe, 0x15, "1e189bbfd2cbb0552c72a36d252436af73f8546aa6138a61059880db2e357e8e55b15a01ed772011977f1401220186908bfd7cbaa4eb181f4d8ea9ca19a5b3b1", "5823572382f76ad0dd668d2762d4014c8a426b2b8b42e96ddcb97c068f0e411e", [0x20, 0xe5]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}) 22:35:17 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600) 22:35:17 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7]}) 22:35:17 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) 22:35:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xffff8000}]}}) 22:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 22:35:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x2000000}]}}) 22:35:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0, 0x1010}], 0x1, 0x0) 22:35:18 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x320]}) 22:35:18 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:18 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2003]}) 22:35:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x800) fchdir(r1) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x1, 0x1, [0x1, 0x2, 0x800, 0x7f, 0x0, 0x2, 0xfffffffffffff801, 0xece]}) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:18 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ff]}) 22:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 22:35:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40000, 0x0) r1 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0x498) r3 = getgid() r4 = signalfd4(0xffffffffffffff9c, &(0x7f0000000780)={0x10e}, 0x8, 0x800) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/video2\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000840)={0x5, 0x70, 0x9, 0x816, 0xf5, 0x8, 0x0, 0x1, 0x10000, 0x2, 0x6, 0xffffffff, 0x20, 0x7f, 0xffffffffffff061e, 0x10000000000, 0x3, 0x5, 0x6, 0x6, 0x7f, 0x2, 0x139, 0x9, 0x1, 0x1, 0x8, 0x2, 0x2, 0x1, 0x3, 0x3f, 0xffffffff, 0x81, 0xb2b, 0x7, 0xd1e, 0x1, 0x0, 0x73, 0x1, @perf_bp={&(0x7f0000000800), 0xe}, 0x2, 0x9, 0x6, 0x1, 0x8, 0x0, 0xffffffff}, 0x0, 0xb, 0xffffffffffffff9c, 0xa) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x8) r10 = syz_open_dev$media(&(0x7f0000000980)='/dev/media#\x00', 0xe970, 0x80) r11 = syz_open_dev$admmidi(&(0x7f0000004a40)='/dev/admmidi#\x00', 0x7, 0x98840) r12 = socket$bt_bnep(0x1f, 0x3, 0x4) r13 = syz_open_dev$media(&(0x7f0000004a80)='/dev/media#\x00', 0xffffffffffffffbd, 0x10000) sendmsg$unix(r0, &(0x7f0000004b40)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000280)="55709fdb43701455879c49bda832cdcc97f1ec3bcede6d5a60bcb3d295237343258717b0983322ea744867d7bf96c04b687835c39af3ab9954ba95383a90970619af5e9bd15288170c1e17291cec21eab911f70f7193df9b8d00e22570b939e63679fd74a182b05eb37118b788f4223108586dddc10d783fb5e935859c6699241171d867cc85b5bd70c2a9ff9ab19814c4a808ddefe8af40e9d1fb8155048629", 0xa0}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000340)="4390f580b7eafbd2cc963a88456b02be66048969385cdbfcb85c3f93e7aa44f7a98afefd8fe79cfcee6601966f02ed01768bfc3b3a30c73d716704f704416e413e5e5f18fb1ecbd1", 0x48}, {&(0x7f0000000500)="d92e4e8cbefab0e209a4aff6382467678594f70469b67e2518803d7c9fd889a823f273a66bece9447bf9c8f4", 0x2c}, {&(0x7f0000000540)="6b640af6a485bb171fad23525e1f0fdca41b2a842cc95ff0911b8e3f7ac69949cc91a8f96a966c97199f34d7c7e18e8ec26e5d48bfcf6f064a700ee6212571846f806af549c43907f7429bd73c886937965780b1a64db1fbf6e96db3cf9a808543c29ef1427c98a1f82d4fb353fa89e97e7e72cbd6604c53", 0x78}], 0x5, &(0x7f0000004ac0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000004030000000000000080100000001000023", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13], 0x70, 0x20000000}, 0xc044) r14 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404040, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r16 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x18, 0x8001) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40001) setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f0000000080)=r14, 0x4) poll(&(0x7f00000003c0)=[{r15}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f0000000140)=0x3, 0x4) 22:35:18 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00h\x03\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:19 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x7fff, 0x4}) 22:35:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfd]}) 22:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 22:35:19 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x03\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfffffdfd}]}}) 22:35:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x3f000000}]}}) 22:35:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffe7]}) 22:35:19 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7ff) dup3(r0, r0, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:19 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x4002) sendfile(r0, r0, &(0x7f0000000040), 0x6) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:19 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x03\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 22:35:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}) 22:35:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}) 22:35:19 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 22:35:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20030000]}) 22:35:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x80ffff00000000}]}}) 22:35:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x40000000}]}}) 22:35:20 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ffffff]}) 22:35:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2000000a2100, 0x0) sync_file_range(r0, 0x3, 0x7fff, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) 22:35:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 22:35:20 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x400, 0x0) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) ioctl$RTC_UIE_ON(r2, 0x7003) 22:35:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) 22:35:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) 22:35:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4800) 22:35:20 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/33) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:20 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x100000000000000}]}}) 22:35:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0xfdfdffff}]}}) 22:35:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffe7]}) 22:35:21 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x895f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0xd4, 0x8, 0xfffffffffffffffb, 0x5, 0x80000000, 0x0, 0x2, {r2, @in={{0x2, 0x4e21, @broadcast}}, 0xeb, 0xb917, 0xfff, 0x1f, 0x2}}, &(0x7f0000000100)=0xb0) poll(&(0x7f0000000000), 0x3af, 0x0) 22:35:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4c00) 22:35:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x100000000000000]}) 22:35:21 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x10000) 22:35:21 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x200000000000000]}) 22:35:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:21 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0, 0x80000000}], 0x1, 0x0) 22:35:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000) 22:35:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x200000000000000}]}}) 22:35:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0xffff8000}]}}) 22:35:22 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'user.', 'queue1\x00'}, &(0x7f0000000280)=""/189, 0xbd) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xc) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000580)=ANY=[], 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x10001, 0x6, 0x6, 'queue1\x00', 0x9}) 22:35:22 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2003000000000000]}) 22:35:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6800) 22:35:22 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:22 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ffffffffffffff]}) 22:35:22 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6c00) 22:35:22 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) 22:35:22 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\"\x0f\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:22 executing program 2: inotify_init() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x408000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x1, 0x1, 0x7f, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x3f00000000000000}]}}) 22:35:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0xfffffdfd}]}}) 22:35:22 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffffffffffff]}) 22:35:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7400) 22:35:22 executing program 2: r0 = socket$kcm(0x10, 0x2000000000802, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="2e0000002a00815fe45ac187185095cf0600b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:22 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:23 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffdfd]}) 22:35:23 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x3) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 22:35:23 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7a00) 22:35:23 executing program 2: r0 = io_uring_setup(0x322, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x3, 0x344}) fadvise64(r0, 0x0, 0x4, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0), 0x0, 0x0) 22:35:23 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffffffffffe7]}) 22:35:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x4000000000000000}]}}) 22:35:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x80ffff00000000}]}}) 22:35:23 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e24, @multicast2}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000094d5c360774004a106e69806eaa84e0777815e25e33a1a810dd4edd72bb95f56abca93499d34f97e8dfda568592d4734f8a24eaeace523aa093f68d1e5f6e28769f409062b687aa1615294094e090044dc9a5374694f66c17fa01be61d1e9cc86cd42e422b72d0a2688ab7c418dedbc84dc63f5f0740f71bcfa810984682e0", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0x8) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:23 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}) 22:35:23 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x231860) 22:35:23 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x65) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x101f, 0x4) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x800ce) setsockopt$inet6_buf(r2, 0x29, 0x23, &(0x7f00000001c0)="eb5cb7e32d61804d8f9452a55e1ab536b4f625d87a4deeb555a90a59fc19f017dc6a07bc0fcfaacd66b5b264ae846dc0b1722f6b7087f25eb2b6252dfaf7f566f9697cb62484b93284eae01786a20d36a1b32e336a637edc42343fd3ad070bb592b997cceaeb285b082a04bb9f8ccd8bff182d9cb738775b856f4a61c6f9bb49b596235ba456bf8e6c9b87d372b4d991507c8c2cf430", 0x96) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xff, 0xffffffffffffffff}) 22:35:23 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7]}) 22:35:24 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x320]}) 22:35:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 22:35:24 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x0f\"\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:24 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2003]}) 22:35:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xfdfdffff00000000}]}}) 22:35:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x100000000000000}]}}) 22:35:24 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ff]}) 22:35:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 22:35:24 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:24 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfd]}) 22:35:24 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x464140, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) 22:35:24 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffe7]}) 22:35:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 22:35:25 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:25 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x862a}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x8}, 0x8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r2, 0x4}], 0x1, 0xffffbffffffffffc) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18, 0x0, 0x5, {0x6}}, 0x18) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) chroot(&(0x7f0000000200)='./file0\x00') 22:35:25 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}) 22:35:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0xffffffff00000000}]}}) 22:35:25 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20004, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x81, 0x4) 22:35:25 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}) 22:35:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 22:35:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x200000000000000}]}}) 22:35:25 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:25 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x20030000]}) 22:35:25 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x280000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) rt_sigqueueinfo(r1, 0xb, &(0x7f0000000040)={0x9, 0x2, 0x4}) poll(&(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000440)={0x0, 0x3000}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80101, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000400)={0x5, 0x6, 0x9d, 0x1c1a2c2, 0x3, 0x5}) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x2, 0x0, 0x100000001, 0xfffffffffffffff7, 0x0, 0x8, 0x400, 0x3, 0x1f, 0x9, 0x9, 0x101, 0x10001, 0x2ae, 0x5, 0xff, 0x4, 0x9, 0xb8, 0x6, 0x72, 0xd073, 0x4, 0x9, 0x4, 0x252a, 0xe8b6, 0xff, 0x9, 0x1, 0x5, 0x1, 0xfffffffffffffff7, 0x3, 0x0, 0x99a, 0x0, 0xfffffffffffffff9, 0x6, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1000, 0x5, 0x9, 0x7, 0x9, 0x4, 0xffffffff}, r1, 0xe, r3, 0x9) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0x0, 0xff, 0x5, 0x9, 0x5f}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e23, 0x200, @local, 0x3}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x8, @remote, 0x6e}, @in6={0xa, 0x4e24, 0x7, @local}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x10}, 0xcf}, @in6={0xa, 0x4e21, 0x1000, @empty, 0x3ff}, @in6={0xa, 0x4e22, 0x3, @local, 0x3f}], 0xd4) rt_sigqueueinfo(r1, 0x18, &(0x7f0000000300)={0x31, 0x7fff, 0x100}) 22:35:25 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000080)=0xfffffffffffffffe) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x3c400) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 22:35:25 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00J\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:25 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ffffff]}) 22:35:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 22:35:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x2}]}}) 22:35:26 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 22:35:26 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) io_setup(0xcf, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x14a) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000040)="154fe41d5048e968433b89c777ba92f3a1199d5d011891855ba3afc06e28817035267f2de67363519e364b0f7cfe58de7b3f3551d1f3311cbbfb2d23055c111b9dc75d75b660bbb9ff525262", 0x4c, 0x6, 0x0, 0x2, r2}, &(0x7f0000000140)) 22:35:26 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x3f00000000000000}]}}) 22:35:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 22:35:26 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) 22:35:26 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xa8000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0xff, 0x8, 0x4f}) 22:35:26 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:26 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffe7]}) 22:35:26 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7f, 0x40000) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x3, 0x47504a4d, 0x2, @stepwise={0x1, 0x100000001, 0x1, 0x7, 0x10001, 0x20}}) 22:35:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 22:35:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x3f00}]}}) 22:35:27 executing program 2: poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x101102) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 22:35:27 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x87`\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:27 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}) 22:35:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0x4000000000000000}]}}) 22:35:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 22:35:27 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0xfff}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xd0, 0x7, 0x7ff, 0x3]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x40) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:27 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}) 22:35:27 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:27 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2003000000000000]}) 22:35:27 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) epoll_create(0x1) 22:35:27 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ffffffffffffff]}) 22:35:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x4000}]}}) 22:35:27 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x2c0) mmap$perf(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x10, r1, 0x0) 22:35:27 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x03h\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 22:35:28 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x1, 0x210000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001400)=ANY=[@ANYRES32=r2, @ANYBLOB="0900000088003f9070048988f10409fff89954bcfacdf8f9633e627d3054a57be9882a43c086ff9e31930b733ec7af023cbaaf2a34a79a631f857631d71dad4b0372d3a940237f17021f400d62d2"]) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x401, 0x82040) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001480)={{0x4000, 0x6004, 0x3, 0x3f, 0x4, 0xca8e, 0x4, 0x6, 0x4, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0xe, 0x4, 0x403, 0x9, 0x5, 0x6, 0x69, 0x0, 0x2b, 0xfffffffffffffffe}, {0xd000, 0x4, 0x1e, 0x3f, 0x0, 0x80, 0xf3a3, 0x7, 0x4, 0x7, 0xe74, 0x4}, {0xd000, 0x3000, 0xe, 0x6, 0x7fff, 0x5, 0xffffffff, 0x8, 0x9bea, 0x2, 0x6, 0x8001}, {0x3004, 0x10d001, 0xb, 0x100000001, 0x1ff, 0xfffffffffffff07d, 0x100000001, 0x5, 0x2, 0x5, 0x5, 0x2}, {0x3002, 0x2001, 0xe, 0x4, 0xffffffff, 0x9, 0xf7d, 0x5, 0x6, 0xff, 0x1, 0x1}, {0x10000, 0xf000, 0x10, 0x1, 0x1f, 0x100, 0xff, 0x560, 0x1ff, 0x0, 0xff, 0x2}, {0x6000, 0x2, 0x0, 0x6, 0x8, 0xfffffffffffff10a, 0x80000000, 0x100000001, 0x0, 0x33, 0x9, 0x100000001}, {0x105000, 0x1001}, {0x6000, 0xf000}, 0x1d52a097b63c6a43, 0x0, 0x6000, 0x8, 0x7, 0x8000, 0x0, [0x100000000, 0x7, 0x4, 0x3]}) accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) write$input_event(r3, &(0x7f0000000340)={{0x0, 0x2710}, 0x12, 0x36d3, 0x3}, 0x18) recvmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/101, 0x65}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=""/15, 0xf}, 0x0) 22:35:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000], 0xfdfdffff00000000}]}}) 22:35:28 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) 22:35:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 22:35:28 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:28 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffffffffffff]}) 22:35:28 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) 22:35:28 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x80ffff}]}}) 22:35:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 22:35:28 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffdfd]}) 22:35:28 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x5, 0x200030000) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x4) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:28 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x2}]}}) 22:35:29 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffffffffffe7]}) 22:35:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x2) 22:35:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 22:35:29 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x03\xb2\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:29 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}) 22:35:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x6240) 22:35:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x1000000}]}}) 22:35:29 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7]}) 22:35:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:29 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe8\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 22:35:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x3f00}]}}) 22:35:30 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x320]}) 22:35:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 22:35:30 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xfe\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:30 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2003]}) 22:35:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x5, 0x4) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x2000000}]}}) 22:35:30 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ff]}) 22:35:30 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ftruncate(r0, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x48000000) 22:35:30 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x4000}]}}) 22:35:31 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x9, 0xbd, 0x6, 0x529a}, 0x8) 22:35:31 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfd]}) 22:35:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4c000000) 22:35:31 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x84q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:31 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffe7]}) 22:35:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60000000) 22:35:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x3f000000}]}}) 22:35:31 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}) 22:35:31 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x85q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:31 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xfffffffffffffeff, 0x10000) 22:35:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) 22:35:31 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}) 22:35:31 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80, 0x400) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0xa748f0b9d1df574e}, {r1, 0x2}, {r1, 0x1}, {r1, 0x110}], 0x4, &(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000100)={0x5}, 0x8) 22:35:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x68000000) 22:35:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x80ffff}]}}) 22:35:31 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x86q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:32 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x20030000]}) 22:35:32 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x40000) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x40000000}]}}) 22:35:32 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ffffff]}) 22:35:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6c000000) 22:35:32 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x87q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:32 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2100, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x9d, 0x3}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:32 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) 22:35:32 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:32 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 22:35:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x1000000}]}}) 22:35:32 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x88q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x74000000) 22:35:32 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getspdinfo={0x94, 0x25, 0x1, 0x70bd2b, 0x25dfdbfd, 0x40, [@lifetime_val={0x24, 0x9, {0x8001, 0x3, 0x7, 0x7f}}, @migrate={0x5c, 0x11, [{@in=@broadcast, @in6=@empty, 0x2b, 0x0, 0x0, 0x3501, 0x2, 0x2}, {@in=@local, @in=@rand_addr=0x400, 0x7c, 0x6, 0x0, 0x3506, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mknod(&(0x7f0000000000)='./file0\x00', 0xe206, 0x2) 22:35:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0xfdfdffff}]}}) 22:35:33 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffe7]}) 22:35:33 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x101, 0x50000) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7a000000) 22:35:33 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x89q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:33 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) 22:35:33 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x28080) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3e) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r2}], 0x1, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) 22:35:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 22:35:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x2000000}]}}) 22:35:33 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x8aq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:33 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}) 22:35:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000003ab74b515bc1a25a47d10efa84729e54a0d7e94aea809713d555759694f5292c072e58abe500000000000000000000000082be", @ANYRES16=r2, @ANYBLOB="280425bd7000fddbdf25080000005c0001000800010002000000140003000000000000000000000000000000000108000200ff000000080008000100000008000b007369700008000b00736970000c000700220000003e00000008000b00736970000800050001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4081) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0xffff8000}]}}) 22:35:34 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2003000000000000]}) 22:35:34 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x450480) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 22:35:34 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x8bq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:34 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ffffffffffffff]}) 22:35:34 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @dev={[], 0x14}}, 0x14) 22:35:34 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 22:35:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x3f000000}]}}) 22:35:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f606fa9e000) 22:35:34 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_tables_targets\x00') 22:35:34 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x8cq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0xfffffdfd}]}}) 22:35:35 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffffffffffff]}) 22:35:35 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8000}, {r0, 0x1000}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x5}, 0x8) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000140)=""/52, 0x34}], 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) 22:35:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f696e2e0700) 22:35:35 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x8dq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:35 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffdfd]}) 22:35:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x72e6e697f0000) 22:35:35 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffe7]}) 22:35:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x40000000}]}}) 22:35:35 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x8eq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:35 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x140, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 22:35:36 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000000400), 0x1000) 22:35:36 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x1, "a66b84bfff83002a277c9600000100", 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x4000000000000080, 0x400000000003, 0x7fff}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0xffffffffffffc8c8, {0x1, 0xffffffffffffde6f, 0x6, 0xffff, 0x7, 0x1}}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x1, {0x8, 0x7ff, 0xe8, 0xb0c, 0x1, 0x8}}) 22:35:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0a96f607f0000) 22:35:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x80ffff00000000}]}}) 22:35:36 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x8fq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:36 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xf}, 0x8000}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x23, "059bbf3969d48c06c7967cd044b84ca8f2dbd7b932936fc8ad1d4a4f0578c4bed6f599"}, &(0x7f00000001c0)=0x2b) 22:35:36 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 22:35:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 22:35:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0xfdfdffff}]}}) 22:35:36 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x90q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:36 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1fffffffffffffa2, 0x0) 22:35:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 22:35:36 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:36 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x3, 0xff, 0x7, 0x8, 0x1, 0x401, 0x8001]}, &(0x7f0000000040)=0x12) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x400, "a66b84bfff838fc6a88febad7410179c057a9f49dc316db479cc29c84a277c96"}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000000c0)={0x40, 0x10, &(0x7f0000000180)="b01fe8f6d98b493a3b3b4da4a39942fc40d09908ce31bc2c39aee4d23cc79452e3eadd94fe60fd0454e600c7bc731bbd0fe12ab0bc9e86479089e0f7af5f8812af353cabdcddb2a0f1ddb635c350acd71d45a737e7b922a0d5dc3a8996f74069170113af7d376723cef01f4adb9dc25b95aa873652", {0x7, 0x1, 0x494e4f4b, 0xf, 0x200, 0x2, 0xe, 0x1}}) 22:35:36 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff3b00000000000, 0x7fff, 0x8, 0x8, 0x1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x7ff}, &(0x7f0000000100)=0x8) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x100000000000000}]}}) 22:35:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 22:35:37 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x1, "a66b84bfff838fe679cc29c84a277c96000000f7000200", 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2}) 22:35:37 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x91q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:37 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x979, 0x40000) write$P9_RSTAT(r0, &(0x7f0000000040)={0x59, 0x7d, 0x2, {0x0, 0x52, 0x400000000000000, 0xfffffffffffffeff, {0x40, 0x0, 0x7}, 0x10000, 0x8, 0x3, 0xd8, 0xa, '/dev/cuse\x00', 0xa, '/dev/cuse\x00', 0x1, '^', 0xa, '/dev/cuse\x00'}}, 0x59) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x200) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0xffff8000}]}}) 22:35:37 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x411}, {r0, 0x8350}, {r0, 0x104}], 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x28, 0x37, 0x1, {0x2, 0x1f, 0x8cd5, r2, 0xa, '/dev/cuse\x00'}}, 0x28) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) 22:35:37 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x8}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x572, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0xf123, @remote, 0x1}, @in6={0xa, 0x4e23, 0x1, @rand_addr="9f4e10a6023d178c7d99d60e33fe8b23", 0x5}], 0xa4) 22:35:37 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x92q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 22:35:37 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x503000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000500)=0xe8) write$smack_current(r0, &(0x7f00000000c0)=',*%keyringð1}uservboxnet1/\x00', 0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@ipv6_getroute={0x128, 0x1a, 0xb03, 0x70bd2a, 0x25dfdbfc, {0xa, 0x14, 0x30, 0x3, 0xfe, 0x3, 0x0, 0x2, 0x2000}, [@RTA_ENCAP={0xbc, 0x16, @typed={0xb8, 0x1c, @binary="d800317218b0d109fcdbe712161ec02bc7c661583452d179505089b5f3b51084386fb226ef61bc30931216ae3dfef0bcfe323c8dbba4611a69e1542074eb703d8c34328049218c5182fbaecf894502b0284c7a6b716ee06fd728929bff276d716429ea822a5501fcc3d5cc462a6cf06dea2c5451e1f5d1de08d33d0282af33e6b9fe5ab16b6452190c18042e977ba68812e3c4a8617114d9bb204e1389813c911d4d74ddb59fe6bc94f5987fd793abc6a0cf"}}, @RTA_PREF={0x8, 0x14, 0x4}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_OIF={0x8, 0x4, r1}, @RTA_EXPIRES={0x8, 0x17, 0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x12d3160a, 0xff, 0x7, r2}}, @RTA_IIF={0x8, 0x1, r3}, @RTA_MARK={0x8, 0x10, 0x401}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x4, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:37 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x200000000000000}]}}) 22:35:37 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:37 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) fcntl$addseals(r0, 0x409, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) 22:35:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 22:35:37 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x93q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0xfffffdfd}]}}) 22:35:38 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xbfab8b7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x2, 0x50}, &(0x7f0000000100)=0x8) 22:35:38 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0, 0x100}], 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x5, @remote, 0x100000001}, @in6={0xa, 0x4e21, 0x80000000, @loopback, 0x1}], 0x48) 22:35:38 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x94q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 22:35:38 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x400, 0x200000) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:38 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x7, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x3f00000000000000}]}}) 22:35:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 22:35:38 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x95q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:38 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xfffffffffffff303) 22:35:38 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x29, 0x4, 0x5}}, 0x14) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x80ffff00000000}]}}) 22:35:39 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="97748d15aca04e574414a3b5497ce02099537b9f922225e591136c56400af3a1cfe83df044dec3cc80feca2bbb2cdc51530d96f341506a9f41876d75f9adc077b3a84ca035a585e0015be8e3c35ea418e1809b2d3396e53b8af7a19c8fe261e8fbd82c216501d335049edded0c8672b499e49fa23dbdca7d8f907a9a8621621a60fcaf77c9b1dcba0e1479a7790d82a092dc72257073df6ba66f35a41151809853571d4bb9668a9adf582168a2ceb214190c144c27fb886934e03bb507d4024c0969766f031b26d8c05429cbf5bb294328abfdca2cb72e9ae579cd9c1e7957e0343c52b99aabe60cf1", 0xe9) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:39 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) syz_open_procfs(r1, &(0x7f0000000200)='net\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x10000000000000, 0x120) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0xfffffffffffffffa, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x240800, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x5, 0x5, 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) r5 = msgget$private(0x0, 0x40a) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001400)=""/61) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x6, 0x2000000}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r7, 0x10000}, 0x8) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/181) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000008, 0x1818) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x2f, 0x4, 0x0, {0x0, 0x7fff, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) read$eventfd(r0, &(0x7f0000000000), 0x8) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0x3dd85ce8) bind$isdn_base(r0, &(0x7f0000000180)={0x22, 0x401, 0x5, 0x7, 0x5}, 0x6) 22:35:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 22:35:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x4000000000000000}]}}) 22:35:39 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x96q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x56ad}, {r0, 0x10}], 0x241, 0x0) 22:35:39 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) write$P9_RSTAT(r0, &(0x7f0000000000)={0x6b, 0x7d, 0x1, {0x0, 0x64, 0xbc3, 0x5, {0x2, 0x3, 0x5}, 0x2000000, 0x5, 0x3ff, 0x7, 0xd, ').@%@$GPLppp1', 0xc, '/dev/radio#\x00', 0xc, '/dev/radio#\x00', 0xc, '/dev/radio#\x00'}}, 0x6b) 22:35:39 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa}, 0x1c}}, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4) sendmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, 0x0}}], 0x8, 0x910) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0xffffffffffffffff, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 22:35:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x2000018a, 0x400000) 22:35:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 22:35:39 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x97q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x100000000000000}]}}) 22:35:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000040)={0x4, 0x1, [0x0, 0x9, 0x7ff, 0x6433, 0x8], 0x3}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000000c0)='net/softnet_stat\x00') 22:35:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x3a715f69, 0x3, @stepwise={0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x5}}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='bpq0\x00'}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:35:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 22:35:40 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x98q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0xfdfdffff00000000}]}}) 22:35:40 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000040)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x800, 0x30}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x21}, 0x4}}, 0x4, 0x35ac, 0x6, 0x8, 0x28}, &(0x7f0000000300)=0x98) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x12040) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x100, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 22:35:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000040)) 22:35:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 22:35:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x367984da436186cc, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10043, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000080)=0x1) 22:35:40 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x2, "a66b84bfff838fdac1427b667410179c057a9f7adc316db479cc29c84a277c96", 0x0, 0x1}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x2, 0x10000000, 0x8}, 0x10) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x800) socket(0x1b, 0x6, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) sendto(r0, &(0x7f0000000180)="c368b67e936fd05cbaad162d6b8e0d57f42ecab29a8dfbcd7b317cfa4a82c9171ee7f904a7b8d06fa49ff59e194d395219e8fa1f713f1bd1d3be298b6bdf829a74a7f3ec0c743663c1ce11da1573baecf67568b7e0f56bb33ede23ffbb58c67892f9f13f0c7f88b4b23962c36eb08a85960103cab31e76ad87fc291bcf4843d09cafb96735363e4eb7628e18b2c526c5", 0x90, 0x1, &(0x7f00000002c0)=@xdp={0x2c, 0x5, r1, 0x23}, 0x80) 22:35:40 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x99q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x200000000000000}]}}) 22:35:41 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppoe, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x40, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, 0x7fff, 0x1118546e, 0x7f, 0x9, 0xfc6, {0xbc99, 0x1, 0x59f2, 0xfff, 0x1, 0x1f, 0x9, 0x0, 0x10001, 0x3, 0x391, 0x7, 0x800, 0x7105, "60667de3e34296d6084eb229b6dc4738368cff621542904425a0472090d176fa"}}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x100000001) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179cdc316db479cc29c84a277c9600"}) setxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.ima\x00', &(0x7f00000003c0)=@md5={0x1, "7d477ad665c0a71f65d3f92da244966e"}, 0x11, 0x2) 22:35:41 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc800, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3bb6, 0x301480) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='/dev/cuse\x00') poll(&(0x7f00000003c0), 0x0, 0x0) 22:35:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 22:35:41 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x9aq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0xffffffff00000000}]}}) 22:35:41 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bff7838fe6a88feb6db479cc29c84a277c9600", 0x4, 0x200040000000}) rt_sigprocmask(0x2, &(0x7f0000000000)={0x2892}, &(0x7f0000000040), 0x8) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x0, 0x1, [0x2, 0x1, 0x7fffffff, 0x2, 0xc1, 0x81, 0x3f, 0x1]}) 22:35:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x701c02, 0x100) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x4080, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x7ffa, 0x5, 0x9, 0x1, 0x23}, 0xfffffffffffffe50) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x40) 22:35:41 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @speck128}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x9679, 0x0, 0x7, 0x101, 0x1000}, 0x14) 22:35:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 22:35:41 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:41 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x9bq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x3f00000000000000}]}}) 22:35:42 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4800000000000000) 22:35:42 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x9cq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:42 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0xa6, &(0x7f0000000080)=0xffffffffffffffdc) 22:35:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x2}]}}) 22:35:42 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) poll(&(0x7f0000000100), 0x0, 0x1034394e) 22:35:42 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) dup(r0) 22:35:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4c00000000000000) 22:35:42 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x9, 0x11, 0xf71, 0x0, "be0632a2ce0b9fe4971efb9f5612c0eb26172a67cdad96b8fce8586d323b1ded"}) 22:35:42 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x9dq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000) 22:35:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x4000000000000000}]}}) 22:35:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:43 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x9eq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6018230000000000) 22:35:43 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x13f}}, 0x20) 22:35:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x3f00}]}}) 22:35:43 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0x2e, "0d43b77fabe5d430bfdaf992c0ee310162b50e6b9cb0d7b0b7cc66ea025253d452169808216995465335abdb9b0e"}, &(0x7f0000000180)=0x36) 22:35:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6800000000000000) 22:35:43 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x9fq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:43 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x3) 22:35:43 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x2) 22:35:43 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x4, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000280)=0x7) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r3, 0x2, 0x1, 0xfffffffffffffff9, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f0000000040)="589783743719be7370d77a18dfee0e0bdf70dbdc6958784a5b55f1a13f975eeb36bfdee16cc42a1efbaa7c9d33016a2a039135084685b3ecf6c231223897dcd2cd99730d7f3d0607f41043c44c04", 0x4e, 0x0, 0x0, 0x2, r3}]) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0xfdfdffff00000000}]}}) 22:35:43 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="b4d2723851579dfdcef18398a1bf590a01f15ad351d432c1bcb911b8bc1bcc4747f056bc9813a5154528926a48b0a2cd71a3fb0cfd31d7e63b848a43b9a41beee7b56fa2c990910bd91fdda99fc0130130", 0xffffffe0}], 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)="456445e2f552af0cdf960419c9054663829867d3905d0b7ef690758f0e8414ff77bebd2eda5b83c045138a8f821e3997529f69cc141e5f9b0bfe9b4b4726e9fd71a6a470053c8a5dc1688c6999653c3c98b277c160eddd0b0cf7d1d606a00e7f", 0x60) 22:35:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6c00000000000000) 22:35:43 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa0q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:44 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) bind(r0, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x80) pause() ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000001c0)=""/192) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x5, 0x3ff, 0x3, 0x3, 0x101, "dd730769112cb5c4ee8db3e91d5a535aa90155", 0x2, 0x10000}) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x80) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0x7ff, 0x80, 0x6, 0xffff, 0x3, 0x50}) 22:35:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x4000}]}}) 22:35:44 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0xfffffffffffffc00, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x4, 0x4, 0x0, 0x0, 0x2, 0x0, 0x2}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) 22:35:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7400000000000000) 22:35:44 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa1q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:44 executing program 3: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e20, @empty}}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r1, 0x393, 0x4, r1}) 22:35:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x80000000, 0x5, 0x3, 0x23, &(0x7f0000000040)=""/35, 0x73, &(0x7f0000000180)=""/115, 0xa, &(0x7f00000000c0)=""/10}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7a00000000000000) 22:35:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x2}]}}) 22:35:44 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa2q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:44 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xaf9, 0x8000) 22:35:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 22:35:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x1f, 0x9, 0x1, 0x1}, 0x8) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x200, 0x9, 0x1, 0xf9e, 0x19, 0x3, 0x0, 0xffffffffffffffb1, 0x4, 0x5}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x1) poll(&(0x7f00000003c0)=[{r2}], 0x20000000000003d9, 0x0) 22:35:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x80ffff}]}}) 22:35:45 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0xb5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x30200, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0x10000, 0x5000, 0xf004, 0xf000], 0x4ccf, 0x1}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000000c0)={0x1, 0x2, 0x7fffffff, 0x9, 'syz1\x00', 0x1000}) 22:35:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x10, &(0x7f0000000000)={&(0x7f0000000180)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000011c0)={{{@in=@multicast1, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000012c0)=0xe8) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001580)={0x1, &(0x7f0000001540)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000015c0)={r2, 0x20}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000001600)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x6, 0x0, 0x7, 0x1, 0x3}}) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000001180)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001340)={&(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x4}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0)='IPVS\x00') ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000001680)) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x84, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4881}, 0x20000000) 22:35:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "a816dfe0abb8bc5e54ae24c372e2782b81648d"}, 0x14, 0x3) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:45 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa3q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x40000, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000000)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x3, 0x6, 0x0, 0x80}) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x800}}, 0x18) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x82) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180)) dup(r1) [ 3177.018011][T15304] *** Guest State *** [ 3177.037295][T15304] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3177.050172][T15304] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3177.066891][T15304] CR3 = 0x0000000000000000 [ 3177.074611][T15304] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3177.085803][T15304] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3177.101415][T15304] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 22:35:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 3177.112101][T15304] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3177.131590][T15304] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3177.163257][T15304] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.176173][T15304] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.212433][T15304] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.234983][T15304] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.250967][T15304] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.263468][T15304] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.276405][T15304] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3177.290068][T15304] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.299633][T15304] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3177.308583][T15304] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.317573][T15304] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3177.324799][T15304] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3177.333227][T15304] Interruptibility = 00000000 ActivityState = 00000000 [ 3177.340320][T15304] *** Host State *** [ 3177.344232][T15304] RIP = 0xffffffff811b4980 RSP = 0xffff888062c578e0 [ 3177.351084][T15304] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3177.358270][T15304] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3177.366863][T15304] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3177.373454][T15304] CR0=0000000080050033 CR3=000000005c7d7000 CR4=00000000001426f0 [ 3177.382077][T15304] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3177.389542][T15304] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3177.396300][T15304] *** Control State *** [ 3177.401011][T15304] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3177.408447][T15304] EntryControls=0000d1ff ExitControls=002fefff [ 3177.414802][T15304] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3177.422535][T15304] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3177.429963][T15304] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3177.437326][T15304] reason=80000021 qualification=0000000000000000 [ 3177.444353][T15304] IDTVectoring: info=00000000 errcode=00000000 [ 3177.450549][T15304] TSC Offset = 0xfffff9581c2c8011 [ 3177.455603][T15304] EPT pointer = 0x00000000a9ae401e [ 3177.497440][T15304] *** Guest State *** [ 3177.501636][T15304] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3177.512359][T15304] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3177.522758][T15304] CR3 = 0x0000000000000000 [ 3177.527403][T15304] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3177.534759][T15304] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:35:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x3f00}]}}) 22:35:45 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x610000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x5}, 0x8) signalfd(r0, &(0x7f0000000040)={0xee}, 0x8) 22:35:45 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa4q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3177.542270][T15304] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3177.549175][T15304] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3177.555999][T15304] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3177.565524][T15304] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.576354][T15304] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.600157][T15304] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) [ 3177.658143][T15304] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.677063][T15304] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.686113][T15304] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.702649][T15304] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3177.725964][T15304] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.749278][T15304] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3177.759173][T15304] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3177.773713][T15304] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3177.788177][T15304] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3177.797261][T15304] Interruptibility = 00000000 ActivityState = 00000000 [ 3177.809222][T15304] *** Host State *** [ 3177.814132][T15304] RIP = 0xffffffff811b4980 RSP = 0xffff888062c578e0 [ 3177.822536][T15304] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3177.837604][T15304] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3177.857196][T15304] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3177.864569][T15304] CR0=0000000080050033 CR3=000000005c7d7000 CR4=00000000001426e0 [ 3177.872846][T15304] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3177.880803][T15304] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3177.888392][T15304] *** Control State *** [ 3177.892777][T15304] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3177.900681][T15304] EntryControls=0000d1ff ExitControls=002fefff 22:35:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x1000000}]}}) 22:35:46 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x111000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000a00)) ioctl$VT_WAITACTIVE(r1, 0x5607) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) 22:35:46 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa5q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3177.907416][T15304] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3177.915280][T15304] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3177.923289][T15304] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3177.931167][T15304] reason=80000021 qualification=0000000000000000 [ 3177.938720][T15304] IDTVectoring: info=00000000 errcode=00000000 [ 3177.945113][T15304] TSC Offset = 0xfffff957d8d84ee7 [ 3177.950657][T15304] EPT pointer = 0x000000008e7c601e 22:35:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000000c0)=0x9) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:46 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x10000}) 22:35:46 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x80000000, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x7) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000380)={@local}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0xffffffffffffff58) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100, 0x0, 0xa4c30300]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0xc) [ 3178.162530][T15358] *** Guest State *** [ 3178.182537][T15358] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3178.230147][T15358] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3178.266328][T15358] CR3 = 0x0000000000000000 [ 3178.276783][T15358] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3178.292698][T15358] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3178.300926][T15358] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3178.312432][T15358] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3178.320413][T15358] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3178.340169][T15358] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.350941][T15358] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.362565][T15358] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.373062][T15358] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.384717][T15358] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.394949][T15358] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.405621][T15358] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3178.414729][T15358] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.423548][T15358] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3178.432389][T15358] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3178.441262][T15358] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3178.448495][T15358] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3178.448508][T15358] Interruptibility = 00000000 ActivityState = 00000000 [ 3178.448513][T15358] *** Host State *** [ 3178.448525][T15358] RIP = 0xffffffff811b4980 RSP = 0xffff8880a0fb78e0 [ 3178.448545][T15358] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3178.467913][T15358] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3178.493555][T15358] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3178.504319][T15358] CR0=0000000080050033 CR3=00000000a9251000 CR4=00000000001426e0 [ 3178.512252][T15358] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3178.519976][T15358] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3178.526922][T15358] *** Control State *** [ 3178.531114][T15358] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:35:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x4000}]}}) 22:35:46 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa6q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:46 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000240)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000280)=0x1) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) 22:35:46 executing program 2: [ 3178.541824][T15358] EntryControls=0000d1ff ExitControls=002fefff [ 3178.551319][T15358] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3178.569191][T15358] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3178.590188][T15358] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:35:46 executing program 2: [ 3178.617194][T15358] reason=80000021 qualification=0000000000000000 [ 3178.678199][T15358] IDTVectoring: info=00000000 errcode=00000000 [ 3178.697024][T15358] TSC Offset = 0xfffff9578396a871 [ 3178.708311][T15358] EPT pointer = 0x000000009850901e 22:35:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x2000000}]}}) 22:35:47 executing program 2: 22:35:47 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000110}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 22:35:47 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa7q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0xfffffffffffffd95, 0x2, 0x0, 0xfffffffffffffedc) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 22:35:47 executing program 2: 22:35:47 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x2, "33e447f6d94a827aee24b96ace4bbeab79b1d561bd13d59991be1234a9b827c9", 0x5, 0x400, 0x7, 0xffffffffffff2443, 0x0, 0x6, 0x80, 0x7}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fsync(r1) [ 3179.012547][T15404] *** Guest State *** [ 3179.022936][T15404] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3179.054947][T15404] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3179.074866][T15404] CR3 = 0x0000000000000000 [ 3179.079899][T15404] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3179.089195][T15404] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3179.098127][T15404] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3179.105143][T15404] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3179.112742][T15404] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3179.120541][T15404] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.129614][T15404] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.139601][T15404] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.148695][T15404] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.158215][T15404] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.168919][T15404] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.179482][T15404] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3179.188747][T15404] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.197811][T15404] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3179.206726][T15404] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3179.215400][T15404] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3179.223395][T15404] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3179.237372][T15404] Interruptibility = 00000000 ActivityState = 00000000 [ 3179.251000][T15404] *** Host State *** [ 3179.254936][T15404] RIP = 0xffffffff811b4980 RSP = 0xffff888039f0f8e0 [ 3179.276792][T15404] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3179.283950][T15404] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3179.292619][T15404] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3179.299480][T15404] CR0=0000000080050033 CR3=0000000098743000 CR4=00000000001426e0 [ 3179.307367][T15404] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3179.314839][T15404] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3179.321696][T15404] *** Control State *** [ 3179.325855][T15404] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3179.333265][T15404] EntryControls=0000d1ff ExitControls=002fefff [ 3179.339498][T15404] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3179.348141][T15404] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3179.355514][T15404] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3179.362900][T15404] reason=80000021 qualification=0000000000000000 [ 3179.370472][T15404] IDTVectoring: info=00000000 errcode=00000000 [ 3179.376738][T15404] TSC Offset = 0xfffff9570b90a0cd [ 3179.381763][T15404] EPT pointer = 0x0000000057f1b01e 22:35:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x80ffff}]}}) 22:35:47 executing program 2: 22:35:47 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:47 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa8q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:47 executing program 2: 22:35:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x3f000000}]}}) 22:35:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:48 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) read$rfkill(r0, &(0x7f0000000000), 0x8) 22:35:48 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xa9q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:48 executing program 2: 22:35:48 executing program 2: 22:35:48 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000002c0)=""/64) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) r1 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4) mkdirat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x1ff) [ 3179.894734][T15446] *** Guest State *** [ 3179.907187][T15446] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3179.924299][T15446] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3179.950547][T15446] CR3 = 0x0000000000000000 [ 3179.964516][T15446] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3179.993884][T15446] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3180.005956][T15446] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3180.013555][T15446] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3180.021028][T15446] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3180.028906][T15446] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.038445][T15446] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.047515][T15446] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.056554][T15446] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.065745][T15446] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.074838][T15446] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.084004][T15446] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3180.096931][T15446] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.113106][T15446] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3180.122203][T15446] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.132780][T15446] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3180.153027][T15446] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3180.161845][T15446] Interruptibility = 00000000 ActivityState = 00000000 [ 3180.170141][T15446] *** Host State *** [ 3180.174227][T15446] RIP = 0xffffffff811b4980 RSP = 0xffff8880a0fb78e0 [ 3180.182285][T15446] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3180.190094][T15446] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3180.198796][T15446] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3180.205401][T15446] CR0=0000000080050033 CR3=000000009501b000 CR4=00000000001426f0 [ 3180.213342][T15446] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3180.220836][T15446] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3180.227643][T15446] *** Control State *** [ 3180.231808][T15446] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3180.239235][T15446] EntryControls=0000d1ff ExitControls=002fefff [ 3180.245401][T15446] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3180.253120][T15446] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3180.260604][T15446] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3180.268707][T15446] reason=80000021 qualification=0000000000000000 [ 3180.275735][T15446] IDTVectoring: info=00000000 errcode=00000000 [ 3180.282075][T15446] TSC Offset = 0xfffff95692461068 [ 3180.287539][T15446] EPT pointer = 0x00000000a08d801e 22:35:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x1000000}]}}) 22:35:48 executing program 2: 22:35:48 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x100000001}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:48 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xaaq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3180.358017][T15465] *** Guest State *** [ 3180.362070][T15465] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3180.372630][T15465] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3180.382442][T15465] CR3 = 0x0000000000000000 [ 3180.396755][T15465] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:35:48 executing program 2: [ 3180.410677][T15465] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3180.450385][T15465] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3180.489703][T15465] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3180.511141][T15465] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3180.526997][T15465] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.535893][T15465] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.570490][T15465] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.582257][T15465] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.592428][T15465] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.601703][T15465] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.610677][T15465] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3180.630142][T15465] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.639346][T15465] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3180.649184][T15465] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3180.658446][T15465] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3180.665738][T15465] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3180.674836][T15465] Interruptibility = 00000000 ActivityState = 00000000 [ 3180.700031][T15465] *** Host State *** [ 3180.704148][T15465] RIP = 0xffffffff811b4980 RSP = 0xffff88803b2af8e0 [ 3180.711125][T15465] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3180.718630][T15465] FSBase=00007f696e2bf700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3180.727304][T15465] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3180.734000][T15465] CR0=0000000080050033 CR3=000000009501b000 CR4=00000000001426f0 [ 3180.756777][T15465] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3180.765770][T15465] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3180.772723][T15465] *** Control State *** 22:35:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x40000000}]}}) [ 3180.778789][T15465] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3180.786276][T15465] EntryControls=0000d1ff ExitControls=002fefff [ 3180.792585][T15465] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3180.800387][T15465] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3180.815253][T15465] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:35:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:49 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x6) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 22:35:49 executing program 2: 22:35:49 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xabq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3180.833531][T15465] reason=80000021 qualification=0000000000000000 [ 3180.842223][T15465] IDTVectoring: info=00000000 errcode=00000000 [ 3180.848579][T15465] TSC Offset = 0xfffff9565242b18c [ 3180.854910][T15465] EPT pointer = 0x000000009828101e 22:35:49 executing program 2: 22:35:49 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x570, 0x218, 0x0, 0x218, 0x488, 0x488, 0x488, 0x4, &(0x7f0000000040), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xffffff00, 0xff, @mac=@local, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x7, 0x10000, 0x7, 0x6, 0x8, 0x2, 'gre0\x00', 'gretap0\x00', {}, {0xff}}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5b60000000, 'system_u:object_r:modules_object_t:s0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x15}, @mac=@remote, @rand_addr=0x4, @rand_addr=0x7fff, 0xf, 0xffffffff}}}, {{@arp={@remote, @broadcast, 0xff000000, 0xffffffff, @empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff]}, 0x1b7e, 0x1, 0x0, 0x2, 0x9, 0x89, 'hsr0\x00', 'irlan0\x00', {}, {}, 0x0, 0x44}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x17}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5c0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x1ff, 0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x4) 22:35:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x2000000}]}}) 22:35:49 executing program 2: inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) 22:35:49 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xacq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:49 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000000)=""/46, 0x2e}], 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x12710, 0x3, 0x1001, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 22:35:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0xfdfdffff}]}}) 22:35:49 executing program 2: inotify_init1(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x0) 22:35:49 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/91, &(0x7f00000000c0)=0x5b) 22:35:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:49 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xadq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000100)="982cef0f050520d0f80791b0064141e2e996855b66c4237909a200800000e60fc4014e66f66d220fa0e5be34d1c4e1f8c421fc22ebd72e41812047002b0000006eba0dfe8c738888a1c40fbbc4e201acac10000000808f294001b00b0000000f71d539f08171a38a806ebb57c46291ae8ca065600000c4618de3c0740f2d9600000000cadcdc1d440f2b550142c4b6593131b15dfba1c9fb110f0f3804830a000000") ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100, 0x0, 0x3c396]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) [ 3181.763431][T15548] *** Guest State *** 22:35:50 executing program 3: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) [ 3181.797190][T15548] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3181.821714][T15548] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3181.852299][T15548] CR3 = 0x0000000000000000 [ 3181.864166][T15548] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3181.892012][T15548] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3181.912680][T15548] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3181.927873][T15548] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3181.943883][T15548] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3181.962302][T15548] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3181.981896][T15548] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3181.996527][T15548] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.006212][T15548] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.015592][T15548] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.024878][T15548] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.033751][T15548] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3182.042501][T15548] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.051280][T15548] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3182.060031][T15548] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.068807][T15548] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3182.075941][T15548] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3182.084912][T15548] Interruptibility = 00000000 ActivityState = 00000000 [ 3182.091928][T15548] *** Host State *** [ 3182.095845][T15548] RIP = 0xffffffff811b4980 RSP = 0xffff88806391f8e0 [ 3182.102744][T15548] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3182.109950][T15548] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3182.118588][T15548] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3182.125194][T15548] CR0=0000000080050033 CR3=0000000060531000 CR4=00000000001426f0 [ 3182.133001][T15548] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3182.140574][T15548] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3182.147410][T15548] *** Control State *** [ 3182.151765][T15548] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3182.159241][T15548] EntryControls=0000d1ff ExitControls=002fefff [ 3182.165512][T15548] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3182.173254][T15548] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3182.180963][T15548] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3182.188384][T15548] reason=80000021 qualification=0000000000000000 [ 3182.188393][T15548] IDTVectoring: info=00000000 errcode=00000000 [ 3182.188400][T15548] TSC Offset = 0xfffff95593b14118 [ 3182.188410][T15548] EPT pointer = 0x00000000632bd01e 22:35:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x3f000000}]}}) 22:35:50 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xaeq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:50 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x400e, 0x8, 0x2}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x82, 0x0, 0x0, 0x0, 0x36e1, 0x0, 0x2, 0x1000, 0x10000}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:50 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) 22:35:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3182.439590][T15582] *** Guest State *** [ 3182.466072][T15582] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3182.479144][T15582] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3182.490952][T15582] CR3 = 0x0000000000000000 [ 3182.495396][T15582] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3182.502758][T15582] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3182.510380][T15582] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3182.517318][T15582] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3182.524075][T15582] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3182.531892][T15582] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.540963][T15582] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.550116][T15582] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.559191][T15582] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.603525][T15582] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.612634][T15582] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3182.640363][T15582] GDTR: limit=0x00000000, base=0x0000000000000000 22:35:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0xffff8000}]}}) 22:35:50 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x27, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x6, r1}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:50 executing program 2: mknod(&(0x7f00000001c0)='./file1\x00', 0xc042, 0x0) 22:35:50 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xafq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3182.653184][T15582] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:51 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendfile(r0, r1, 0x0, 0x666d) [ 3182.705635][T15582] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3182.727079][T15582] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:51 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x21, &(0x7f0000000000)={@dev, @local}, &(0x7f0000000040)=0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3182.775351][T15582] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:35:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 3182.816781][T15582] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3182.844092][T15582] Interruptibility = 00000000 ActivityState = 00000000 [ 3182.893433][T15582] *** Host State *** [ 3182.936723][T15582] RIP = 0xffffffff811b4980 RSP = 0xffff8880a9abf8e0 [ 3182.968550][T15582] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3182.981373][T15582] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3182.991277][T15582] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3182.999443][T15582] CR0=0000000080050033 CR3=0000000091991000 CR4=00000000001426f0 [ 3183.018943][T15582] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3183.032007][T15582] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3183.039323][T15582] *** Control State *** [ 3183.043603][T15582] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3183.051535][T15582] EntryControls=0000d1ff ExitControls=002fefff [ 3183.058234][T15582] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3183.065962][T15582] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3183.073795][T15582] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3183.081192][T15582] reason=80000021 qualification=0000000000000000 [ 3183.088274][T15582] IDTVectoring: info=00000000 errcode=00000000 [ 3183.094430][T15582] TSC Offset = 0xfffff95533296814 [ 3183.099555][T15582] EPT pointer = 0x000000009987801e 22:35:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x40000000}]}}) 22:35:51 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x5, 0x25) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20800, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0xb, 0x2, 0x2, 0x0, 0xffffffffffffff9c}) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:51 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb0q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:35:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0xfffffdfd}]}}) 22:35:51 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2100, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000003e000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="66b80f6b55d30f23d00f21f86635200000000f23f8660f3a63ba840200f2d9ea0f3566b8010000000f01c166b9800000c00f326635000800000f302ef30f30df73d7ff3266b9a40900000f32", 0x4c}], 0x1, 0x10, &(0x7f00000001c0), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:35:51 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:51 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb1q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:51 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:52 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) [ 3183.685269][T15652] *** Guest State *** [ 3183.695908][T15652] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3183.707050][T15652] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3183.723327][T15652] CR3 = 0x0000000000000000 [ 3183.742735][T15652] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3183.750941][T15652] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3183.770665][T15652] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3183.785860][T15652] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3183.802264][T15652] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3183.810660][T15652] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3183.830050][T15652] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3183.840633][T15652] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:52 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x9, 0x5, 0x4, 0x230404, {0x0, 0x7530}, {0x2, 0x2, 0x9, 0x519, 0x1c0000000, 0x0, "d9f88053"}, 0x2, 0x3, @fd=r0, 0x4}) [ 3183.850429][T15652] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3183.859973][T15652] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3183.889916][T15652] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3183.918812][T15652] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3183.936896][T15652] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3183.945711][T15652] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3183.999462][T15652] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.011720][T15652] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3184.059399][T15652] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3184.068303][T15652] Interruptibility = 00000000 ActivityState = 00000000 [ 3184.075415][T15652] *** Host State *** [ 3184.079977][T15652] RIP = 0xffffffff811b4980 RSP = 0xffff8880a0fb78e0 [ 3184.087741][T15652] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3184.095086][T15652] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3184.108760][T15652] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3184.115496][T15652] CR0=0000000080050033 CR3=0000000088140000 CR4=00000000001426e0 [ 3184.127035][T15652] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3184.134738][T15652] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3184.142285][T15652] *** Control State *** [ 3184.150179][T15652] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:35:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0xfdfdffff}]}}) 22:35:52 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb2q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x80ffff00000000}]}}) 22:35:52 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000240)={0x0, 0x100000001, 0xb74, [], &(0x7f00000000c0)=0x7}) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0xfffffffffffffffe) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0x6, 0x2, 0x21, "ff805a228db6c86303ecaa52dc0de71ea65fbef32d8965719bd3c6cbc8b9e248ea1b7484f89f44485321a2d7ecda4b827457b072cb9a9549f7dda557", 0x34, "4980490c66d52ce97c4cb6db92fe900f70386ac8481f74b949176cb0feb7d5e5f2363a5583106ebdf30958dc4b13021d732b4c3e16c9deac80d22707", 0x10}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x5, 0x736f4974, 0x9, 0x81}) openat$mixer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/mixer\x00', 0x121081, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x20000}) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r2, 0x6, &(0x7f0000001700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x100000, r0, &(0x7f00000002c0)="d53a891be12359cbaee9584959f0ae6727375afe3ebbde7f26839c3a0ff088140e8d78586efba407c4e2d87f54dd5523fd679e53be", 0x35, 0x7f, 0x0, 0x3, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000340)="effacdd1d8ce0f4b11b6671fb25de4a799eb7529ac16b5b236b9e8599c6103b9746b04cc2e999cbf1b70a195fdb6000f209ed78ed7b6bc1835", 0x39, 0xba8b, 0x0, 0x3, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f00000003c0)="80c58b9b497d117589986dedae01fa7cadfda9205b6fcb8f19d873c5d29dbd2bd6d6d1fa859d506a4dd1a01086d71111b324dadcbfd145fbfda94ce40b386b110303fc4dcdde6c6bf84fa17db25f2711ded47ad2295f08f5e8f2ed4bb12a7b47d4c32fe38ee757693e7fd37db3291d2f51a4726e0033123a8e2a5d0a94f2c69ca852bade5acb8696f538d6da722a1e43b206f09a258eb6c21969c145c2bd5256b6ff11e1f46c5ff9e9a417a33cdba41faee6b52ef270745a4c3cc355426db241f266f8fd", 0xc4, 0x3, 0x0, 0x3, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000500)="8e61f92ea31d9b0f1b7716ddbed7a25f711dd407321b591752f986c1c2ac0fee283a8e8d5542c9b6328273cfe37895901392fcc3b92bc4cbd8292dcfd027bf8683e70eb2068d5cdcf72234d5e26c04afdbea0c21febd69bb331c406aa3eeb2752c319689dd267d3f3c62bd6d0fc3b44687284721109e5f6c8095a468c934840715c38d5541e9a2c4f197b58af98b15cd95b7e24c727d1b4f8f7ed8286244148c80ab563d75bcaf88055b64318e98d5d3fb3ff397530adab16a4a282bb107d6c48cfca285a3691c89013f0e486ad2a2d3863044a3565e1b5acaa34b20c41e7b8583e8c5943151e7747723cae54ddbf2752cd5f08f63d78bd1fd6fbad15bd7aeb59ae8674e65bd2f88febfbab4ebd2e10814dea0321d9eeb6de8e98762ee753fc212cf017ca01e9082c468ae39f77b95698b8a3e4801c04695e4cc1e33ea541a2b8eca920ce4580253a28fe54604956f553531411fe7417cea76882a30e6434d1213aab25f32f79ba9f8dc723c7bda410711834c84cf83ea42bf01ee58b78cd52ad01f9634d01298dc197d3ec4c338ff1320ee375227dea6ce9bc869af0f97db801a6658f3d34a8f2c02b358b4e83389108929f83b49ae28c08c0958b2fe6d0540cc4be07049b232ec8f3fc4fa55100fcbad7fe9ee36cde5635ec56ff2d6522a0c120604c2567f7b4aac6f15b921f831b514ad45cf292317841dc9dda9401861886a64accb028ef5cf84036055f7ea8e70ce03aaad102310863ffdd19ca95731dbf2b9f6436ff8420b1cce9fb5555fe9990e4e9256be0ed1d2752a61acd649a902bbc7308a5696ce234fedb23c665d742e8c2516db12e29b31c7618eb350b0bcfdb72e60e43c835098628d65e90789a3be30e7b1e57b8b0feda27f9d35e88bc969419f10a1c798391dc433d0d2d14d1de9bccde3506095dd7105464d0fec83bf83fb2ea03ee084bb9df1cf9d4c1c1447b76b278856b03c05c249431efca29aa9b54120b3d662c6ed642349776776b3b48d69136df00fa91eb38134a88e2fda17248f3ad42ad7d992d6fa134f697dec1fc0c3f452763f71ce0bc8849777fd3585b1616bebbb8cd8ac1cdf81fa6c4216ec5dc75dfcffd6dc3f6019ad2f115cceae1a6d71894d172cac11c54e463c6f4c2bb80b365c4ca18a530dae67ef64d4d0e46d82d3e3c4a8a68348f63f10af87c9bed5d8ab569461e268cc920abf0d1414120e17f3737c99426b99f18216798632b9d0dc57617d8227f13882eaf0545f464bb68e316452040c0ed35651b995b17ef454f37fe812620e2e1ee9e266bb26eb78abb44ed9c8a862e88000eb8c52a55bd9f5b53c4d887f5d6f31261c00839069265b611e86bb4e4ce5fe9fbc7f9ad6e4a1ba388da582594d08ad6611a12ef44bdd84adff473d03a8863731c0f86cc62fee3812c68dfb097da72d9e64c35f01596c39261ce725c1ce9ed1be213880ab87450fdb59a63469b49938253834f9da4856b8a8a8ce46b108c8cea0dea885226b9a5b99575fc01bfc900ad635401c8e99583dbe0ff8b3cb1dd4ff7dc421105c0586f81ac7a30de8bf2aa011d3e850c7e952283a8476582257b1edd0f35fb7f7a285e112c2a1849fa9c8ab97c21fc0d1b70dab8ad29bd076c5330d07219f46b349e05a0520882260d5de83fdb8fe8fde5a81b01c230a3ea930317e0c9b1ecd199a1a04d0ca2aebab4394b0e28f9fdd036159902415218a0bcff5d2bf8c06070c33285743130301475d3a887e3cf168259f4de35a492f6c1b936acce037e3737c11359a51904fa7d3e01a8c7e7ecfe5ef86b3e967b3046e80c41b99fd3cb0e0734811d860af729861c691e714dc1ddb1b543c872f8e3009fa5718bd819c9faaad8ed5c0cc1599deefd0bb4a02496cd860398f2a966d823799aed28a1e269ebe09ad591b32108638259a289d83153c1e46e2b7e76306832fe695dc0a220c402b67b446198636834c3561b8cb9a0004bb85a5bcf2529c0fb8b14cba8efadefe8f0cfd7019e2e71e3d5bc9d3e275f685741698b6622de8e530c9e41ed4c30d6785589c30595b73b76c2011fdc388cca933e12ca932f84446c32e17dd8533f8092510bc3235e88593a4b2fc0877bcafe0654e58eab688a765070d563090d937d1a2e61af44163425b917a4ab154af47f2095ef5bce9e92a59f70abc611b770bd17540c87b6825b53b84cbf0f641b5fdc0404a9aa472f6e76bc1e447c530a39477f4bfbc0f7514d411895603047ece23cb93f68b1282bf14539c867608ec0afbb533074e72a2f024698bb441dc71eee1859f1876e780371a364707c36ce7bfbc95e8a58cf192410a3aede480cd024256061a73be6defc2547c3555fe3059aa4385262720015549b25c2bb4415791c33bfa8d29643b2e29db9aea5b2fc851a69607e27a9d90d02ad1f6cef0f48430a8ac5e2f6eaac46bded2cbdac4d2fecdb7e883a0d5670dbcf49ac8e66cf6c2744853b9dbdc1d68bc0883560969e50a10985cf594ae2eb2efd711cac6ddecd92e48d7c6b0fd67ca11646d8005c2abc8bef0ce140ca479f98db31316043a9f6c43aa16e9d4d699599f7e473f4654c1c2b5cdbb05cd7372f1e786f9e9b21e1ecf436d95fc9c940da069bf43412d1dc0d0e5b6b29747a52c2564130ebb277da002866bdae0a5b9ba37d955f592ea50d0dad9ae9fc1f9e8294e4830aab2970e99aa80c4dc98b03de213212071133544fd3d4f9ee201b4a8487e39055b326c05104833a2171be560b64a98c3cbe9f6d987cb75b762f9033a83806d3faf13bf8584cd4c66e3b54dc43185f4d7ad01dd63cdffa63ce8d7c6e3b5c44aa1621f013b7c9d99cdbca4094691596058045279322785bc5246e2c5d84c374ba327c1b1d33dc77f061ed10c2c6490e0d8bd4294aafbc09d3caf5d1f4c2ec126841cd9a117bf6f518a9901f6384dabf2d2fad7441b1724a03cb43cf99109cf412511ebf2425c387f65ae2053255e297a8eec01f7084fafa87b3f38e3b7884e03ab1bd5bb77ce147f2ca8bbf63d62150e8f6c05c6e3debb7a923d4f216e34235d8f90795eda471290d76edf0b948c9c44309c6c97ded4c94e143bd0586d4c5828f532fb6939497c0b736a76f83fbbcb3d4d58f7b9e30dfd532f584a2233d3593bbc2c579e37b5f9ba573d0111792204b88875f71b82f16b8c09fbcb5ad9b5c4c6fe119ae55d31cf42fd43034a8450a4869f1e9774ff6cd647dc53e2cb2948e7a313b42f07ba8ab948f84dd40c29137b60263e111ce19b8e6e150e004baabd35bbb1ce8b32882f2b69499adfccca10999ff950f69d73168c26390e3ad65d4609a08d9ae0433bde8c6cf3f58f1817fac5d7c57b1b54d74c6dd1db5b42cf81d84d018c59b3dee3e27df88042ef364b829ab3702c2097663f8d054e41b4606f37efc922a5714065502166917c1226bbc7d4a2a4cfd7cd1f9dfddf4bdc3b537e8674223e194e8ab6ae1837e411d864660db6176b375f182a092e32be0ab21b246520df4b0980745ae694692e10fd04dd6badae314f16a86e128fa7591936ea3ac86a34633a0d06b42d713069a2ac093dedd6e5381247dfe39a816d24fff7ac930289aae2d18b9d8548a0785ef738438274e1aa6ffcaa098f86ff70aaf1510f8faa81bb103afd96a1afe8f451ca5bc57d2fb10c68b3abeeff87d568512160c2818e5b3b011851321a10af5ae2dd178068b6a662a4df14136bc09bdfb3d6ba67654e4569fe862dee929fcc74f0ac686e3312b825bfceed5ddaa47fb9a8dd613b650ca91ecf4acd3757d690179e4f37edae1b29c1c3f9ea8d588af05e1acd76a32f8a08f9b38fc11a2a581c638d6c3061b1a800030e3f1157d9665693771df590edb411623241f2d6e73f895bdb7a00ef7d3974af4b51cf6353166027a67d316c3901c93c3fabadf1f080a367153924ca77d60c9bd0cfd2ecda7e7c866b39fb19569515cc17337c80295fa6f4d89af737685f3fd703d98b6eab839ccfd1a91a6c17dbaf9dd7c79be2bf894156adac03cb3193620930075580880d3bf2f01d25357b41f5b01e03990920cfcad2ac556ce5132615fa5a998d519ef0588cadc5a841c9505ab916d4e7cf9d2408932d87e2e47be1af6ca710a30f8a210de182f1f8122c69cd6af34a01758c060dc95487a92c4cffaca26ec6e8414de4fcca25d8269433b7bbb65ca43d256be4f7e353aae68d9ef562cd75cfe49967982af8bed03bb139fea98c5cc11ef43a575ed6d5665440138867828e52d959167444d79c90da70266d039655bd9135b3747cf2a4b9a4ec330da36d0b1678cd8eed60ee44518ca350ebf94ab41f5a889af3b56198449e61270cad8104774ba68a579164ff8ab61c9c883e8be0834ee55440edcadfcfadf8d8c489e0eced700af54f309b6fe4963e939cc8c6443e0e09aefa3da4959c27632252262ec266e37ca3a13ceed2a401ffe79dd0f7cce536129a3e69b784e6092ab5aafbc9b6c1dd77559d95b3857f96718efc9cbfa6a5a744be73155facddb77541dd76361d9f3901fd626f5feab54a2bbaa83aaebbc0f80352fd3edea73d598f4bda195f9671b8a8e506c4aaba0e114cdce45f6054a2be7638330c1aa5263f6fc4f123685b491ff999ba1006b437a2b94dbca637cc5c8a302fa78ce227d37d888b502fc68f3f4ae9c0a3d397c01a5cd4773c0757fdcc30a325ab50ee5a74b23d4b51ee088ac57733eef1862c7e8ed48c16386edfc2f64e33e613b36cde007a3356103789dcb0e6a1fbb5679448113be7f9a101c88b9adf608a98b646d494ae0e15a0379995162be9872b80a9de90b57df8371f3e613fe60cdb4a961589c9db695e2774d3d15754e295360e3b609e5320056447d29051a39d0097f4425f894ac805f105cdc7fb252f52f965067dd11332b7378e9539b6a859d0c7351bb4569a5d51d0a39447481297f4aa89eca4507e22dfa59430337e4056cdee9af2329cf28c2e8c500670f7b1489746158e0c9d386bd8925c17b35cbfacffa684648e5e63efb8fa5f15fdb59dd7152b71b2bb4e68b14046078b6acd64b5ceb7872642a6a8fbcad9097c26e165973b50a30fbf9626eb3cf5de4bcaa9bab28a4dc85c93d3cfe7147ebafd329b5064a72aeb4ffdb970a0a059a78c476ee59a1677a70b4decfe6ff49c0f0cdf04676d4eeb87fa976038fff90febecb9ef9fc5dc3d8c19ed7df1dd8aa5b823b6ade670646daf95a03fe678f29db25456203ca8228201ee0a0e972be58f4534c0005b99ec30326426f6c7de64cdb7490bd505d429909efaa2a5353584de6550fb1d334cfa0db607bfb65681fa22c8707a7e5aacd55e610dd2ad7b34ccda6f4af111f596f362a21f71c90e8189ca4bf7ac173c6fbcada6c16bc31379494fc879b7ec5dbd0f6e066e19d8891e97f2a81ad6f6b8efd5530a19ef14ddb38b5aa59efd23754abc9362413453f384df293a5d1ee5589eca476b4935fe05eadd605e3995eaa2536d9b537c93358c1ca4bbb58759bccc7f0c340d13237a41fcf1cf1f37cc9158a63ee90f6725aac076abfcf40cd90fa88c199fdae26e4a9e8351e81775b131238db763690ba7c2090715f8857b1904e1cc8417da8e961a733c892a278f043dc2375d891649ff46f590cde658d1ce9f61e631a27707f8d505dd7e9b674d6036be8cffaa397d8b58222d6da41dc790e1290e97902240d19a20b5a86ef69ac7ce60f0e3e499c1ac26ce819914adff9c95aef52de8a502a8bb9113738e9812f2d1468e6921b424937ff6cab0d7e4023060462e85448abac5b435dbee3a87f0", 0x1000, 0x6, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x80000000, r1, &(0x7f0000001540)="e021113030aa55d02df0e4e0d677e66e6ade7c397811965496a2f9f100e1dbf624441703d0b33c", 0x27, 0x5, 0x0, 0x2, r1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f00000015c0)="a58a4fb5781bed3fa7e4ddbcae99789535da793034e11f6ce3aeda7fbffdde76a91e86cff6b7166a6988f77067d74706bb149530b76efdead7d9af05956336feb5e92ddcf337d5360dafd2b99c0e6831d5feec6988203dfffc9bca8bc327fa7c35add325c7d37576528d7c4626c27fb71312525bc34cbb04768273e4d2a4cf4352b310de496d00f82e9a26604ccbf8709af5e12bd8a3e8f8a5701e081c56c9c8b47aa91628df1f64ad413b3c4b49711c3530fdb7aa026ebd95630afb6c125ce5a20498c86a7cea12d36ca5db76f7", 0xce, 0x5, 0x0, 0x0, r1}]) [ 3184.158404][T15652] EntryControls=0000d1ff ExitControls=002fefff [ 3184.164688][T15652] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3184.172882][T15652] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3184.181813][T15652] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3184.207009][T15652] reason=80000021 qualification=0000000000000000 22:35:52 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x400000000, 0x8) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000280)="85b48913970045dd722c4805e4977d7f123bd76ac9cbc1bf51492efc52336b934dd93b5200000000000000848b518902ace4b56883ff569016c3bf6dbb0df77461e621e8cc467ec2264eac9b0f5807b427e703c78a7d3cd40c892ed2eac4d31f9969b0180c62de") ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3184.258780][T15652] IDTVectoring: info=00000000 errcode=00000000 [ 3184.285480][T15652] TSC Offset = 0xfffff9548ae4c858 [ 3184.301175][T15652] EPT pointer = 0x000000009581f01e 22:35:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:52 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7f, 0x8, '9P2000.L'}, 0x15) 22:35:52 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb3q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:52 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) 22:35:52 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) prctl$PR_SET_FPEXC(0xc, 0x40080) [ 3184.580381][T15711] *** Guest State *** [ 3184.584583][T15711] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3184.608022][T15711] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3184.650792][T15711] CR3 = 0x0000000000000000 [ 3184.666863][T15711] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3184.685493][T15711] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:35:53 executing program 3: r0 = io_uring_setup(0x6ea, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0xc4}) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x5, "fc4cb3e9001e6263b9424910d748"}, 0x10, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x440040, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0xfffffffffffffffe}) [ 3184.695649][T15711] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3184.712313][T15711] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3184.724143][T15711] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3184.736103][T15711] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.768256][T15711] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.822528][T15711] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.854916][T15711] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.880417][T15711] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.890235][T15711] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.900186][T15711] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3184.910163][T15711] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.919250][T15711] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3184.928549][T15711] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3184.937875][T15711] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3184.945164][T15711] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3184.953652][T15711] Interruptibility = 00000000 ActivityState = 00000000 [ 3184.974265][T15711] *** Host State *** [ 3184.979663][T15711] RIP = 0xffffffff811b4980 RSP = 0xffff8880640af8e0 [ 3184.986391][T15711] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3184.995394][T15711] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3185.005672][T15711] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3185.012823][T15711] CR0=0000000080050033 CR3=00000000561e8000 CR4=00000000001426e0 [ 3185.043198][T15711] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3185.051272][T15711] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3185.067266][T15711] *** Control State *** [ 3185.071488][T15711] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3185.115260][T15711] EntryControls=0000d1ff ExitControls=002fefff [ 3185.121995][T15711] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3185.143607][T15711] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 22:35:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0xffff8000}]}}) 22:35:53 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb4q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:53 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x9, 0x5}]}, 0xc, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x100000000000000}]}}) 22:35:53 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x776, &(0x7f0000000140)) io_setup(0xf3e, &(0x7f0000000180)) io_setup(0x6, &(0x7f00000001c0)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000500)={0x8, 0x0, 0x0, {0x7}}, 0x18) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) r3 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={[], 0x3f, 0x8, 0x31507780800000, 0xffffffffffffffc0, 0x1, r3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0) [ 3185.166774][T15711] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3185.207191][T15711] reason=80000021 qualification=0000000000000000 22:35:53 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0)={0x10}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000280)=r0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x2, "a6838fe6008febad7410179c057a9f5adc316db479cc29c84a277c9600", 0x10000000000000, 0x104, 0x1, 0x0, 0x10}) connect$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x48000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)=""/81, &(0x7f0000000040)=0xffffffffffffffe6) [ 3185.259990][T15711] IDTVectoring: info=00000000 errcode=00000000 [ 3185.290989][T15711] TSC Offset = 0xfffff9540d7c4596 [ 3185.328090][T15711] EPT pointer = 0x0000000098b2c01e 22:35:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl(r2, 0x20, &(0x7f00000000c0)="45f727c9fa1e0b82d874743cd8da7168b33f66a44bad76e567efd4ce451039c074b54b01a55308f6a6922a3e5952d5f1b12e86885716350d4c5405119174650f786cf1baa4d72a45c8f0b869") getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x88, @local, 0x4e22, 0x3, 'lblcr\x00', 0x20, 0x6e, 0x6c}, 0x2c) 22:35:53 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:53 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb5q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 22:35:53 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x5, 0x1, 0x8001, 0x0, 0x100000001, 0x128, 0x6, 0x6, 0x138, 0xb325, 0x8, 0x9, 0x75, 0x7fff, 0x80000001, 0x4, 0x756a, 0x0, 0x5, 0x8, 0x0, 0x8, 0x5ca, 0x6, 0x80000000, 0xa, 0x1f, 0x3ff, 0x9, 0x13, 0x5620, 0x8, 0x8d3, 0x3, 0x10001, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffb0, 0xbd8}, 0x880, 0x7fffffff, 0x4, 0x0, 0x822, 0x80000001, 0x80}, r2, 0xffffffffffffffff, r1, 0xa) [ 3185.590873][T15771] *** Guest State *** [ 3185.614283][T15771] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3185.651436][T15771] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:35:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x80ffff00000000}]}}) [ 3185.670866][T15771] CR3 = 0x0000000000000000 [ 3185.675719][T15771] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3185.690612][T15771] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3185.701761][T15771] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3185.712306][T15771] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3185.725303][T15771] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3185.736518][T15771] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.809151][T15771] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.826020][T15771] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.835491][T15771] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.844701][T15771] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.853707][T15771] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.863854][T15771] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3185.872664][T15771] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.882012][T15771] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3185.890860][T15771] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3185.899676][T15771] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3185.906889][T15771] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3185.915071][T15771] Interruptibility = 00000000 ActivityState = 00000000 [ 3185.922153][T15771] *** Host State *** [ 3185.926069][T15771] RIP = 0xffffffff811b4980 RSP = 0xffff888046aaf8e0 [ 3185.933544][T15771] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3185.940806][T15771] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3185.949436][T15771] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3185.956049][T15771] CR0=0000000080050033 CR3=0000000086f9b000 CR4=00000000001426f0 [ 3185.963898][T15771] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3185.971360][T15771] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3185.978250][T15771] *** Control State *** [ 3185.982434][T15771] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3185.989921][T15771] EntryControls=0000d1ff ExitControls=002fefff [ 3185.996109][T15771] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3186.004022][T15771] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3186.012470][T15771] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3186.025391][T15771] reason=80000021 qualification=0000000000000000 [ 3186.033125][T15771] IDTVectoring: info=00000000 errcode=00000000 [ 3186.040203][T15771] TSC Offset = 0xfffff953886ced4c [ 3186.045569][T15771] EPT pointer = 0x0000000099c5201e 22:35:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0xfffffdfd}]}}) 22:35:54 executing program 3: ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000040)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10002, 0x0) 22:35:54 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb6q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0xfffffffffffffea1, 0x31, 0x0, 0x2a0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x200000000000000}]}}) 22:35:54 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x9, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3186.280422][T15803] *** Guest State *** [ 3186.308065][T15803] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:35:54 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb7q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:54 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioperm(0x81, 0x640, 0x9) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3186.349627][T15803] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3186.379268][T15803] CR3 = 0x0000000000000000 [ 3186.412082][T15803] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:35:54 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = msgget(0x2, 0x20) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000011c0)=""/55) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3186.463629][T15803] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3186.482865][T15803] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3186.490160][T15803] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3186.505533][T15803] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:35:54 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) r1 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23, 0x10000, 0x4e20, 0x5, 0x2, 0xa0, 0xa0, 0x84, 0x0, r1}, {0xc8, 0x4, 0x7, 0x6, 0x1000, 0x100000000, 0x9, 0x8000}, {0x9, 0x6, 0xffff, 0x4}, 0x7f, 0x6e6bb6, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d4, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x40, 0x7, 0x5, 0x20}}, 0xe8) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3186.525026][T15803] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3186.543924][T15803] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3186.553210][T15803] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:54 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb8q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3186.579628][T15803] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3186.613547][T15803] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:54 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}) [ 3186.655848][T15803] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3186.705738][T15803] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3186.748092][T15803] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3186.765174][T15803] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3186.775469][T15803] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3186.791647][T15803] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3186.813235][T15803] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3186.823212][T15803] Interruptibility = 00000000 ActivityState = 00000000 [ 3186.831006][T15803] *** Host State *** [ 3186.835178][T15803] RIP = 0xffffffff811b4980 RSP = 0xffff888046aaf8e0 [ 3186.842643][T15803] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3186.850756][T15803] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3186.860101][T15803] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3186.867445][T15803] CR0=0000000080050033 CR3=000000009a79d000 CR4=00000000001426f0 [ 3186.875453][T15803] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3186.883591][T15803] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3186.890978][T15803] *** Control State *** [ 3186.895377][T15803] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3186.903514][T15803] EntryControls=0000d1ff ExitControls=002fefff [ 3186.919367][T15803] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3186.927636][T15803] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3186.935149][T15803] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3186.942929][T15803] reason=80000021 qualification=0000000000000000 [ 3186.950703][T15803] IDTVectoring: info=00000000 errcode=00000000 [ 3186.957431][T15803] TSC Offset = 0xfffff953280f4807 [ 3186.962482][T15803] EPT pointer = 0x00000000888e701e 22:35:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x80ffff00000000}]}}) 22:35:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 22:35:55 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@random="c9c5c67578fa"]}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "d42ddad3480828fbe78642e3746046c423a64e78"}, 0x15, 0x1) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:55 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xb9q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x3f00000000000000}]}}) 22:35:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x201, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x4, 0x100000001, 0x1, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in={{0x2, 0x4e21, @remote}}}, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:55 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:55 executing program 2: r0 = socket$kcm(0x10, 0x2000000000802, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="2e0000002a00815fe45ac187185095cf0600b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) poll(&(0x7f00000003c0)=[{r1}], 0x1, 0x0) 22:35:55 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xbaq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:55 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) 22:35:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000000c0)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:55 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}) [ 3187.579031][T15892] *** Guest State *** [ 3187.583423][T15892] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3187.621952][T15892] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3187.634681][T15892] CR3 = 0x0000000000000000 [ 3187.639844][T15892] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3187.647839][T15892] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3187.658738][T15892] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3187.669782][T15892] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3187.676703][T15892] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3187.684244][T15892] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.693072][T15892] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.702029][T15892] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.710812][T15892] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.719582][T15892] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.728357][T15892] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.737111][T15892] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3187.745808][T15892] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.754556][T15892] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3187.763325][T15892] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3187.772110][T15892] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3187.779368][T15892] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3187.787656][T15892] Interruptibility = 00000000 ActivityState = 00000000 [ 3187.794605][T15892] *** Host State *** [ 3187.798673][T15892] RIP = 0xffffffff811b4980 RSP = 0xffff8880585df8e0 [ 3187.805385][T15892] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3187.812582][T15892] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3187.821137][T15892] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3187.827817][T15892] CR0=0000000080050033 CR3=000000008f57c000 CR4=00000000001426f0 [ 3187.835559][T15892] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3187.843013][T15892] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3187.849858][T15892] *** Control State *** [ 3187.854117][T15892] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3187.861699][T15892] EntryControls=0000d1ff ExitControls=002fefff [ 3187.867958][T15892] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3187.875600][T15892] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3187.883110][T15892] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3187.890465][T15892] reason=80000021 qualification=0000000000000000 [ 3187.897585][T15892] IDTVectoring: info=00000000 errcode=00000000 [ 3187.903751][T15892] TSC Offset = 0xfffff95273bfd040 [ 3187.908971][T15892] EPT pointer = 0x000000005adfa01e 22:35:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x100000000000000}]}}) 22:35:56 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xbbq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:56 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x7, "e57de151b71c13678ef110b5e98b62ed7f6f313fb718594c276886e0eb9b5375", 0x3, 0x100000001, 0x3, 0x40004, 0x2000000, 0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x5, 0x7, 0x9bc8, 0x800, r0}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0xfffffffffffffffd, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x8, 0x420, 0x0, 0x0, 0x0, 0x1, 0x86d, 0x6}) 22:35:56 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xe7ff]}) 22:35:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x4000000000000000}]}}) 22:35:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) write$P9_RAUTH(r3, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0xed, 0x1, 0x1}}, 0x14) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:56 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x0, "05990500355d92c27c96008700199ca2f000", 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x20000000, 0x3, 0x0, 0xfffffffffffffffe}) 22:35:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x40000000}]}}) 22:35:56 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xbcq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3188.304196][T15920] *** Guest State *** 22:35:56 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000001280)={0x0, 0x0, {0x6, 0x81, 0x2017, 0x8, 0xa, 0x3, 0x3}}) readv(r0, &(0x7f0000001240)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/25, 0x19}], 0x3) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80000000, 0x109200) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) dup(r1) [ 3188.332380][T15920] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:35:56 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x9, 0x0, 0x0, 0x1000000000000, 0x2}) [ 3188.377836][T15920] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3188.396412][T15920] CR3 = 0x0000000000000000 [ 3188.416296][T15920] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3188.445987][T15920] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3188.461167][T15920] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3188.477423][T15920] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:35:56 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000180)) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/13) [ 3188.492658][T15920] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3188.532372][T15920] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.557020][T15920] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.584341][T15920] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.594395][T15920] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.620378][T15920] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.633902][T15920] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.643107][T15920] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3188.652256][T15920] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.661241][T15920] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3188.670260][T15920] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3188.679748][T15920] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3188.687378][T15920] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3188.695710][T15920] Interruptibility = 00000000 ActivityState = 00000000 [ 3188.702873][T15920] *** Host State *** [ 3188.707050][T15920] RIP = 0xffffffff811b4980 RSP = 0xffff8880527478e0 [ 3188.713778][T15920] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3188.721027][T15920] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3188.729660][T15920] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3188.736273][T15920] CR0=0000000080050033 CR3=000000005e621000 CR4=00000000001426f0 [ 3188.744145][T15920] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3188.751629][T15920] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3188.759430][T15920] *** Control State *** [ 3188.763610][T15920] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3188.771089][T15920] EntryControls=0000d1ff ExitControls=002fefff [ 3188.777350][T15920] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3188.785799][T15920] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3188.793314][T15920] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3188.800671][T15920] reason=80000021 qualification=0000000000000000 [ 3188.807829][T15920] IDTVectoring: info=00000000 errcode=00000000 [ 3188.814191][T15920] TSC Offset = 0xfffff9521246124c [ 3188.819321][T15920] EPT pointer = 0x000000005712101e [ 3188.890920][T15920] *** Guest State *** [ 3188.895266][T15920] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3188.906341][T15920] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3188.916406][T15920] CR3 = 0x0000000000000000 [ 3188.921445][T15920] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3188.929119][T15920] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3188.936545][T15920] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3188.956853][T15920] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3188.963852][T15920] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3188.971568][T15920] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x200000000000000}]}}) 22:35:57 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xbdq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:57 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}) [ 3188.985494][T15920] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.001752][T15920] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.011620][T15920] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.030753][T15920] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x1000000}]}}) [ 3189.068491][T15920] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.102939][T15920] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3189.149470][T15920] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0xfdfdffff00000000}]}}) [ 3189.198702][T15920] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3189.215769][T15920] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.225102][T15920] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3189.243366][T15920] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3189.252395][T15920] Interruptibility = 00000000 ActivityState = 00000000 [ 3189.265706][T15920] *** Host State *** [ 3189.273659][T15920] RIP = 0xffffffff811b4980 RSP = 0xffff8880527478e0 [ 3189.300411][T15920] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3189.309433][T15920] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3189.327857][T15920] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3189.341489][T15920] CR0=0000000080050033 CR3=000000005e621000 CR4=00000000001426e0 [ 3189.354068][T15920] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3189.362505][T15920] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3189.373378][T15920] *** Control State *** [ 3189.385160][T15920] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3189.401800][T15920] EntryControls=0000d1ff ExitControls=002fefff [ 3189.415098][T15920] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3189.436874][T15920] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3189.444293][T15920] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:35:57 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x86400, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="f2260f01c8660f316f660f657236baf80c66b8a096578766efbafc0cedf7620f83e0460f615a30baf80c66b8ce6bae8766efbafc0cecdbcb", 0x38}], 0x1, 0x10, &(0x7f0000000180), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:35:57 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:57 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xbeq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x1000000}]}}) [ 3189.452109][T15920] reason=80000021 qualification=0000000000000000 [ 3189.461353][T15920] IDTVectoring: info=00000000 errcode=00000000 [ 3189.469906][T15920] TSC Offset = 0xfffff951bea8b8c1 [ 3189.474936][T15920] EPT pointer = 0x000000005fed801e 22:35:57 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x1, 0x1022, 0x9, 0x1ff, 0x2, 0x9, 0x1}) 22:35:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000042000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:57 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x0, 0x8) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x20, 0x4}, 0x9}}, 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) write(r1, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x9, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3189.754747][T16000] *** Guest State *** [ 3189.760275][T16000] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3189.770337][T16000] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3189.790723][T16000] CR3 = 0x0000000000000000 [ 3189.796230][T16000] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3189.806232][T16000] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3189.813854][T16000] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3189.821247][T16000] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3189.828287][T16000] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3189.835961][T16000] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.849287][T16000] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.859234][T16000] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.868277][T16000] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.877485][T16000] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.886359][T16000] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.895310][T16000] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3189.904439][T16000] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.922921][T16000] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3189.933309][T16000] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3189.948604][T16000] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:35:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x3f00000000000000}]}}) 22:35:58 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xbfq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:58 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) bind$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) [ 3189.956079][T16000] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3189.965446][T16000] Interruptibility = 00000000 ActivityState = 00000000 [ 3189.973074][T16000] *** Host State *** [ 3189.977719][T16000] RIP = 0xffffffff811b4980 RSP = 0xffff8880501cf8e0 [ 3189.984672][T16000] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3189.992648][T16000] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3190.001829][T16000] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 22:35:58 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xa1, 0x6, 0x4, 0x0, 0x54, 0x5, 0x81, 0x4, r1}, 0x20) [ 3190.033553][T16000] CR0=0000000080050033 CR3=0000000054068000 CR4=00000000001426e0 [ 3190.056079][T16000] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3190.074320][T16000] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3190.123780][T16000] *** Control State *** [ 3190.156883][T16000] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3190.173955][T16000] EntryControls=0000d1ff ExitControls=002fefff [ 3190.185462][T16000] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:35:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0xffffffff00000000}]}}) 22:35:58 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc0q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:58 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x400, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28}) [ 3190.209516][T16000] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3190.220702][T16000] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3190.264713][T16000] reason=80000021 qualification=0000000000000000 22:35:58 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=0x1000) read(r0, &(0x7f00000000c0)=""/4096, 0x1000) fcntl$setstatus(r0, 0x4, 0x46000) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000021c0)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000000)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x58, 0x0, 0xffffffffffffffff}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000002100)='/dev/vhci\x00', 0x44200) preadv(r2, &(0x7f0000003540)=[{&(0x7f0000002140)=""/86, 0x56}, {&(0x7f0000002200)=""/109, 0x6d}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/189, 0xbd}, {&(0x7f0000003340)=""/218, 0xda}, {&(0x7f0000003440)=""/254, 0xfe}], 0x6, 0x0) [ 3190.313714][T16000] IDTVectoring: info=00000000 errcode=00000000 22:35:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, [], 0x4000000000000000}]}}) [ 3190.381737][T16000] TSC Offset = 0xfffff95149b45ac2 [ 3190.388130][T16000] EPT pointer = 0x0000000090bf301e 22:35:58 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x1, &(0x7f00000001c0)=[0x0]) write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x200, {0x90, 0x1, 0x7}, 0x4c, r1, r2, 0x3, 0xd1, 0xffffffffffffffb6, 0x9, 0x3, 0x20c, 0x2, 0x7fff, 0x3, 0x7fffffff, 0x9, 0x3, 0x2, 0x7, 0x9e}}, 0xa0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) write$P9_RCLUNK(r3, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x1, r4, 0x10, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000180)={0x7, 0x3, 0x1, 0x100000000, 0x2, 0x2}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)={0x2, 0x9, 0x4, 0xe800, {r4, r5/1000+30000}, {0x3, 0x1, 0x5, 0x3, 0x1f, 0x4, "d5818902"}, 0x2144, 0x3, @fd=0xffffffffffffff9c, 0x4}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:35:58 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc1q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x4000000000000000}]}}) 22:35:59 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) socket$inet6(0xa, 0xb, 0x6) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc2q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:35:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) keyctl$session_to_parent(0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3191.023825][T16068] *** Guest State *** [ 3191.028685][T16068] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3191.049316][T16068] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3191.061952][T16068] CR3 = 0x0000000000000000 [ 3191.066429][T16068] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3191.075387][T16068] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3191.095363][T16068] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3191.111157][T16068] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:35:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x2]}]}}) 22:35:59 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="bb3ae55198505e67acc8d04445dac25867958d54c7c345bbae373a506e12ce294d0974251ef3dae533a713afd70b80628e7094694581e34165f3fde4f2719d6e9192e626cd7b112ee8057ec2cd11ff28598218d4915cf96f81ee6a45b63c013532d1092c552de1e936a8cbd8ae0b1d92", 0x70}, {&(0x7f0000000200)="7d7615a35f5094f011c84e1c9f012b15b0b7843edd68140e6274961fa634ac602cdb8cf06119fba301f3043f8142e0f1194a084e89532aaeb24c0753e428bd91502443e26fecd94f33779f4f9ede3bbe03a07927ff81beae0173b72b736557157df2221625e657b799c614e2ec41ab48811c332003284c62dce50dd897ecbc98e20c68f2b5bc6e9fc3dddbfa7d290f2ae535eddec8599a24de65be49f26c606edcfff93f05c7718a20b1103b67019b9111375320eb90708a901f597f", 0xbc}, {&(0x7f00000002c0)="9e6ee27482b46511a6b8ce03ef677af63bdeeb2b1cdfc6b0f1c1455a25b39e84d9ad29a7384390406601a3eac94b91171f0711d8a428d804538b6446e5dc29329f508e034aa39171a9842fe8cec39a99bc98580467f7eaa32458cba1dcc4f3d928fb5c5325c65874bf8129b8daee36d0f4a977287bbfc0e12da2aaf52456d6300ece95e0b2fa62d1900b5d43", 0x8c}, {&(0x7f0000000380)="f6c8629d617ce7b39c101e05fa32ac7f522cc626ac67841f52f7be55e7af9f8051e0f90ac0f015a9518785318bfc327a2247af32efe76b329040f426d99db5961b8b", 0x42}, {&(0x7f0000000400)="b406a2f3cef23692717a53dd72f0ee6ae2d8b0159328b992441c446394c27bd941864c16fb735ac755e92b258ae17629973bec1fd07442525104935391ffe66461fa954e2696f2f8083428fc24f3ba2747f5a31bea1ae46dcbe1ee83d672fe880fe50c6185acdc664231e11f6be6ca", 0x6f}, {&(0x7f0000000480)="601254c29e326f32e69d57bd4469e87e4ba4208190b04b5d332f03011a3b45cceae78817c9690f6e56da00f5766e820ecbd7378d9329e133714ea485057198fcae2a26e4deac2a5627e05c64fb77c9e9a22e", 0x52}, {&(0x7f0000000040)="7ad6dfb1fe733e7740c0cc7ba4add96c229933d89403", 0x16}], 0x7) [ 3191.123171][T16068] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3191.135055][T16068] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3191.151835][T16068] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3191.164254][T16068] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc3q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3191.194079][T16068] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:35:59 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}) 22:35:59 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x3f, 0x0, [], {0x0, @bt={0x37, 0x8, 0x0, 0x1, 0x2, 0x81, 0xffff, 0xfffffffffffffffe, 0x6, 0x5, 0x7, 0x1, 0x3, 0xffffffff, 0xd, 0xc}}}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$void(r0, 0xc0045878) [ 3191.263023][T16068] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3191.274715][T16068] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3191.295404][T16068] GDTR: limit=0x00000000, base=0x0000000000000000 22:35:59 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000023, 0x0) [ 3191.362229][T16068] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3191.395365][T16068] IDTR: limit=0x00000000, base=0x0000000000000000 22:35:59 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xee, "1caef23088299dafb2124e32d8db785d75734b9055b65da999700101b68a2ac3895389c630eb67451b5b5a4cb2d928e43d70796d97cb43de38aa70a0fc797b48e78d0d00905f37712be34558afde242f63c5b44089f6e502bbe2ea3eeefe70adc7e26e2039d1716b7cda0c26eca0d00edf01bc3b8a091015ea923df0102c40c332afa2e1d906bfd29a89b78d1c6dee8f8486fc5353eb47d5a7a87a6588e14e83702eb9dc24d996fd025f50c944228f1fd080594c81560d1cdfbc1137274796e266c90fb644d1c5c371a0b623f0b3e11e4aa49bd520dbafaec4daee520adcfe1201f9695755a7ccd2262e44935fe6"}, &(0x7f00000000c0)=0xf6) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x10000, 0x7b, 0x3, 0x800, 0x3, 0x9900, 0x4, {r2, @in={{0x2, 0x4e21, @remote}}, 0xe9, 0x5, 0x7, 0x9d5, 0xc2}}, &(0x7f0000000340)=0xb0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) [ 3191.412533][T16068] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3191.422763][T16068] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3191.436509][T16068] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3191.460571][T16068] Interruptibility = 00000000 ActivityState = 00000000 [ 3191.483719][T16068] *** Host State *** 22:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc4q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3191.515351][T16068] RIP = 0xffffffff811b4980 RSP = 0xffff8880397978e0 [ 3191.571916][T16068] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3191.591657][T16068] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3191.618399][T16068] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3191.634845][T16068] CR0=0000000080050033 CR3=000000005f9f2000 CR4=00000000001426f0 [ 3191.644908][T16068] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3191.653166][T16068] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3191.668697][T16068] *** Control State *** [ 3191.673335][T16068] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3191.690206][T16068] EntryControls=0000d1ff ExitControls=002fefff [ 3191.702703][T16068] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3191.712380][T16068] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3191.720615][T16068] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3191.733535][T16068] reason=80000021 qualification=0000000000000000 [ 3191.755073][T16068] IDTVectoring: info=00000000 errcode=00000000 [ 3191.761541][T16068] TSC Offset = 0xfffff9509cd3c490 [ 3191.767841][T16068] EPT pointer = 0x0000000096b5901e 22:36:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0xfdfdffff00000000}]}}) 22:36:00 executing program 3: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) 22:36:00 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000023, 0x0) 22:36:00 executing program 5: r0 = socket(0x15, 0x807, 0x9) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000240)={0x8, 0x3ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfc, 0x200802) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3192.075884][T16126] *** Guest State *** [ 3192.083456][T16126] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3192.101859][T16126] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3192.114850][T16126] CR3 = 0x0000000000000000 22:36:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x3f00]}]}}) 22:36:00 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc5q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:00 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x4392) 22:36:00 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000023, 0x0) [ 3192.124306][T16126] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3192.191912][T16126] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3192.230574][T16126] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 22:36:00 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000040)={0x8000, 0x1, 0xffffffffffffffff, 0xffffffffffffff9c}) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x100000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x4, 0x8, 0x25db, 0x0, 0x0, [], [], [], 0x0, 0x3ff}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4}) [ 3192.244334][T16126] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3192.265013][T16126] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3192.276045][T16126] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3192.304976][T16126] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3192.325369][T16126] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3192.342666][T16126] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:00 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 3192.369361][T16126] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3192.385248][T16126] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3192.396021][T16126] GDTR: limit=0x00000000, base=0x0000000000000000 22:36:00 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc6q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3192.413346][T16126] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3192.424893][T16126] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3192.446943][T16126] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:00 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="1fb4d53f4a7f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, 0x0) [ 3192.471271][T16126] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3192.508326][T16126] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3192.542674][T16126] Interruptibility = 00000000 ActivityState = 00000000 [ 3192.570549][T16126] *** Host State *** [ 3192.575448][T16126] RIP = 0xffffffff811b4980 RSP = 0xffff8880397978e0 [ 3192.583309][T16126] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3192.592282][T16126] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3192.615146][T16126] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3192.627015][T16126] CR0=0000000080050033 CR3=00000000a0920000 CR4=00000000001426e0 [ 3192.634931][T16126] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3192.642599][T16126] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3192.650120][T16126] *** Control State *** [ 3192.654538][T16126] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3192.662927][T16126] EntryControls=0000d1ff ExitControls=002fefff [ 3192.669371][T16126] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3192.677248][T16126] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3192.684764][T16126] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3192.692245][T16126] reason=80000021 qualification=0000000000000000 [ 3192.699713][T16126] IDTVectoring: info=00000000 errcode=00000000 [ 3192.721525][T16126] TSC Offset = 0xfffff9500b1a0adc [ 3192.738377][T16126] EPT pointer = 0x000000005c22201e 22:36:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x2}]}}) 22:36:01 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:36:01 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd84) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x80, 0x0) close(r5) accept4(r2, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) 22:36:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x3, 0x73734f5e, 0x2, 0x146, 0x3, @stepwise={{0x8001, 0x3}, {0x547, 0x1}, {0x5}}}) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000100)={0x6, 0x20}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x4000]}]}}) 22:36:01 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc7q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) 22:36:01 executing program 2: r0 = userfaultfd(0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000000c0)=""/74) timer_create(0x1, &(0x7f0000000200)={0x0, 0x0, 0x5, @thr={0x0, 0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = gettid() sched_getaffinity(r2, 0x8, &(0x7f0000000000)) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000640)="2ad4d425", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) 22:36:01 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0x0, "a66b84bfff838fe6a88febad7410179c057a9f5adc316db479cc29c84a277c96"}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x62c6, 0x2, 0x3, @stepwise={{0x100}, {0x800, 0x800}, {0x2, 0xc209}}}) [ 3193.106325][T16181] *** Guest State *** [ 3193.120366][T16181] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3193.156426][T16181] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3193.190863][T16181] CR3 = 0x0000000000000000 22:36:01 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x5, 0x20}) poll(&(0x7f0000000140)=[{r0}, {r1}], 0x2, 0x3) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 3193.209613][T16181] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3193.218605][T16181] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:01 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3193.254405][T16181] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3193.281511][T16181] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:01 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc8q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3193.304677][T16181] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3193.354665][T16181] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.384282][T16181] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.442679][T16181] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.453007][T16181] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.461990][T16181] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.471113][T16181] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.480941][T16181] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3193.491195][T16181] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.500426][T16181] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3193.509690][T16181] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3193.518862][T16181] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3193.526267][T16181] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3193.535180][T16181] Interruptibility = 00000000 ActivityState = 00000000 [ 3193.542778][T16181] *** Host State *** [ 3193.547050][T16181] RIP = 0xffffffff811b4980 RSP = 0xffff8880916b78e0 [ 3193.553761][T16181] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3193.553775][T16181] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3193.553787][T16181] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3193.553802][T16181] CR0=0000000080050033 CR3=000000005a939000 CR4=00000000001426f0 [ 3193.553817][T16181] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3193.553829][T16181] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3193.553835][T16181] *** Control State *** [ 3193.553844][T16181] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3193.553852][T16181] EntryControls=0000d1ff ExitControls=002fefff [ 3193.553865][T16181] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3193.553881][T16181] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3193.579145][T16181] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3193.625463][T16181] reason=80000021 qualification=0000000000000000 [ 3193.652575][T16181] IDTVectoring: info=00000000 errcode=00000000 [ 3193.659817][T16181] TSC Offset = 0xfffff94f7fafaa9e [ 3193.664862][T16181] EPT pointer = 0x000000008fc7f01e 22:36:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x3f00}]}}) 22:36:02 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)=""/197, 0xc5}, {0x0}, {&(0x7f0000000440)=""/45, 0x2d}], 0x4, &(0x7f0000000680)=""/76, 0x4c}}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001580)=""/162, 0xa2}, {0x0}, {&(0x7f00000016c0)=""/82, 0x52}, {&(0x7f0000001740)=""/203, 0xcb}], 0x5}, 0x6}], 0x2, 0x40000000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x38, 0xffffffff, 0x8, 0x4}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r3, 0x20, "9b509aff656cedf694f4b633a0fb0d46549dd57974f207ba742617458184fc24"}, &(0x7f0000000140)=0x28) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x7fff, 0x1, 0x9}, 0xc) r4 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xf6c, 0x100, 0xfffffffffffff001, 0xf658, 0x0, 0x4d3, 0x80, 0x2, 0x100000000, 0x8, 0x3, 0xd87, 0x3f, 0x8000, 0x8, 0x6d8d62eb, 0x0, 0x53, 0x1000, 0xffffffff, 0x5, 0x7, 0xf30, 0x10000, 0x3f, 0x6, 0x3, 0xffffffff, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x6, 0x81, 0xb72d, 0x5294, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0x8}, 0x201, 0x1f, 0x8, 0x8, 0x0, 0x0, 0xfc5}, r4, 0x1, 0xffffffffffffff9c, 0x8) 22:36:02 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x80ffff]}]}}) 22:36:02 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xc9q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:02 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:02 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:02 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3194.154112][T16235] *** Guest State *** 22:36:02 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3194.213207][T16235] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:02 executing program 2: syz_open_dev$admmidi(&(0x7f0000001500)='/dev/admmidi#\x00', 0x5, 0x101200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = epoll_create(0x7fff) open_by_handle_at(r1, &(0x7f0000000180)={0xc4, 0x5, "195e67a9086446034f4cee694025ccb717b71776c6c85fdc71ba3cd5250d1b6db3a146bee6638fd27d7f2c08d22f1ee0d01d667b1095ff69b2c44fb0a45b287ba47d4d3d579ea9f984764034ec131556034dc48d3ba83eb77b79c825aa2f2ee9e8c32c3cc961e33888f1d97b1824c99502a3d6444d3b2daf477b2e381d245711f255d3b24efda692ff49b4a4daa070832ee0d92d2012a502224f656ae5f0ce281ca211cade9ac7194c2e7da616f5a8f830bd6592b84b5a47456ce446"}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 3194.278217][T16235] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3194.306424][T16235] CR3 = 0x0000000000000000 22:36:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x1000000]}]}}) [ 3194.321542][T16235] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3194.347559][T16235] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3194.368373][T16235] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3194.381763][T16235] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3194.394259][T16235] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3194.466941][T16235] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.475675][T16235] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.543350][T16235] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.555859][T16235] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.572674][T16235] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.583390][T16235] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.599837][T16235] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3194.632683][T16235] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x4000}]}}) 22:36:03 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001900)={0x1, 0x8, 0x9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:03 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xcaq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3194.705939][T16235] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3194.730843][T16235] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3194.785514][T16235] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3194.863637][T16235] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3194.956830][T16235] Interruptibility = 00000000 ActivityState = 00000000 [ 3194.963811][T16235] *** Host State *** [ 3194.969435][T16235] RIP = 0xffffffff811b4980 RSP = 0xffff8880948df8e0 [ 3194.992483][T16235] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3195.022611][T16235] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3195.059143][T16235] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3195.065974][T16235] CR0=0000000080050033 CR3=00000000913cc000 CR4=00000000001426f0 [ 3195.074445][T16235] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3195.084074][T16235] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3195.090902][T16235] *** Control State *** [ 3195.095238][T16235] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3195.102678][T16235] EntryControls=0000d1ff ExitControls=002fefff [ 3195.108905][T16235] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000240)=@random={'security.', '/dev/kvm\x00'}, &(0x7f0000000280)=""/14, 0xe) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="7b7da61f227a8e081eb26b2ed895c6c2188b1c35014ae412f325e2cb0b9e42ff607cbc121ca4caecc50a29c2c1df40eeff4d7786c66a6f72d952c86dcb006f0b2e98b7e9ea8149dd96209d01b7aab6f3c8d4158417bcbedc12cc0419e396f58c7f6d4fd2d38559d23c5a259bea2786ae52d506e18196770a929fae702632d756e20f3eb1400580bd7e950ce470082cc945e9adcbdaa7d76273bc8e122bd8f98161c889f688eaf1", 0xa7}, {&(0x7f0000000000)="bd2bd71917a295cf2bcb2d53b37d4bed4b39777cb578f0b0e470a0a637e310318f6b6560bc3215266cc9873f19", 0x2d}, {&(0x7f0000000180)="6f3d97d345f5", 0x6}, {&(0x7f00000001c0)="ae27ef", 0x3}], 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:03 executing program 3: openat$capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/capi20\x00', 0x80200, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x80ffff}]}}) 22:36:03 executing program 2: syz_open_dev$admmidi(&(0x7f0000001500)='/dev/admmidi#\x00', 0x5, 0x101200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = epoll_create(0x7fff) open_by_handle_at(r1, &(0x7f0000000180)={0xc4, 0x5, "195e67a9086446034f4cee694025ccb717b71776c6c85fdc71ba3cd5250d1b6db3a146bee6638fd27d7f2c08d22f1ee0d01d667b1095ff69b2c44fb0a45b287ba47d4d3d579ea9f984764034ec131556034dc48d3ba83eb77b79c825aa2f2ee9e8c32c3cc961e33888f1d97b1824c99502a3d6444d3b2daf477b2e381d245711f255d3b24efda692ff49b4a4daa070832ee0d92d2012a502224f656ae5f0ce281ca211cade9ac7194c2e7da616f5a8f830bd6592b84b5a47456ce446"}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 22:36:03 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xcbq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3195.116531][T16235] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3195.123958][T16235] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3195.131275][T16235] reason=80000021 qualification=0000000000000000 [ 3195.138379][T16235] IDTVectoring: info=00000000 errcode=00000000 [ 3195.144556][T16235] TSC Offset = 0xfffff94ef764162f [ 3195.149639][T16235] EPT pointer = 0x0000000063e8701e 22:36:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:03 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x2000000]}]}}) 22:36:03 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xccq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:03 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="a69cd1a66ec43d63e17a065bbbaa223c4abb21f2f49d04900474308ef55d2847859c1b6209d9c980f0b2f75a1738bace9a09f57f983588df05d8d47e52e49c86d9b4b8751836828082975f0d5ad28f85e2b5884ab1825230b6300fd88cbf10cadf424620e331553d2993afcf9a031b7cc0e73f70a184d9e56a56c6cd764cd3a1a671b44715ae3afe90dce13fe48e5f0fb8c47fc28850413236ce63a402be9afba65ca6429103c93954338c1e4e78acf17f866f1f30d03c1e3b665d4d685216ae86eaba9d5cb4a91cfe5aa25e5ffc2bc9b2cf", 0xd2, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="ca8c6a62da668cc1101c327eadc7a9d55ce379ddb977c180acb18cbe", 0x1c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="9fdcd01c9745ff4caccc33b5c63acccfd7dcd96aebb5482acb23aab2285dd392b820cecbf1e71532fa0890add8595ae900ad53512571061715e1d36be1460e184745b0ea2a8fd4da69f4a8ad2d7c8ef072b5908b949fdbb495cb085149a5f3357d1893fd4621c986eb33c091390e50da5475855f84603655ea8308d5e51765e5b484a5b65468a51bcd95d64bc6a133d828c34ed0f3d5921f55789800672ced", 0x9f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r3, r4, r5}, &(0x7f0000000580)=""/105, 0x69, &(0x7f0000000740)={&(0x7f0000000600)={'rmd256-generic\x00'}, &(0x7f0000000640)="92496d8b19921b2e44684fa94024b248c79f8b0b2ad6d2a0144308712fa75594cb430ee5a1786367187dd490303f36e22e00320531ba14c49a7e6bf9002051115c6a8e9ee76127e4949cf0d4a9994b7bed2da9b0754e9a24a630352df91565e59447d720456cee6add822a83fa257d2a75ccd6be929dbc4b99c5dd59996cef8ab75e3da0dab2929ad33791e0dd99a6f0242bc0f39844acb3e68741301eaaf0924ea06b944ccc1f968be79c4a320d9265a34486e9bce66151b02e112b1325e4e87572ab3600f06490e1b358c7c1ee55b229f4d74320e7100aa3f8210c6798e87d1492ff89e4ee87d055e087cd18d2e908379bdb8f04", 0xf5}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:04 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3195.834928][T16323] encrypted_key: master key parameter 'ÙÉ€ð²÷Z8ºÎš' is invalid 22:36:04 executing program 3: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3195.882595][T16323] *** Guest State *** [ 3195.900040][T16323] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:04 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xcdq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3195.955413][T16323] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3196.011445][T16323] CR3 = 0x0000000000000000 [ 3196.040428][T16323] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:36:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x1000000}]}}) 22:36:04 executing program 3: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) 22:36:04 executing program 2: r0 = socket$unix(0x1, 0x400040000000001, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 3196.089400][T16323] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3196.114490][T16323] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 22:36:04 executing program 3: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3196.151428][T16323] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3196.172604][T16323] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f00000000c0)="98243a0f050520d0f80791b0164141e2e96564dab20000000050855b660f162f0fc4014e66f66d220fa0e5be34d1c4e1f8c421fc22ebd72e41812047002b0000006e67f3c78888a1c40fbbc4e201acac10000000808f294001b00b000000f08171a38a806ebb57c483f963ebff0f01c4740f2d96000000210570dc70dc440f2b0142c4b13120b15ffbb15ffbc441e1e94cba9b0f3804830a000000") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r1, r2, 0x5}) chdir(&(0x7f00000001c0)='./file0\x00') [ 3196.221232][T16323] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.237056][T16323] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.288434][T16323] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x3f000000]}]}}) 22:36:04 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xceq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) [ 3196.376202][T16323] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.407433][T16323] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.449877][T16323] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.471897][T16323] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3196.522879][T16323] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.542394][T16323] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3196.555299][T16323] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3196.573478][T16323] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3196.585495][T16323] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3196.601886][T16370] encrypted_key: master key parameter 'ÙÉ€ð²÷Z8ºÎš' is invalid [ 3196.612452][T16323] Interruptibility = 00000000 ActivityState = 00000000 [ 3196.625338][T16323] *** Host State *** [ 3196.632783][T16323] RIP = 0xffffffff811b4980 RSP = 0xffff88805bebf8e0 [ 3196.643095][T16323] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3196.652411][T16323] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3196.665455][T16323] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3196.674409][T16323] CR0=0000000080050033 CR3=00000000542b7000 CR4=00000000001426e0 [ 3196.703278][T16323] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3196.711542][T16323] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3196.719538][T16323] *** Control State *** [ 3196.723974][T16323] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3196.732091][T16323] EntryControls=0000d1ff ExitControls=002fefff [ 3196.738486][T16323] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3196.746123][T16323] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3196.753567][T16323] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3196.761513][T16323] reason=80000021 qualification=0000000000000000 [ 3196.768626][T16323] IDTVectoring: info=00000000 errcode=00000000 22:36:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='bond_slave_0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) 22:36:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) socket(0x100000000a, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:05 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xcfq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3196.774908][T16323] TSC Offset = 0xfffff94e07eca46a [ 3196.780082][T16323] EPT pointer = 0x000000008a25f01e [ 3196.910898][T16380] *** Guest State *** [ 3196.914935][T16380] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3196.927485][T16380] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3196.937230][T16380] CR3 = 0x0000000000000000 [ 3196.941663][T16380] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3196.949219][T16380] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3196.956531][T16380] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3196.963432][T16380] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3196.970683][T16380] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3196.991911][T16380] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.006917][T16380] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.015869][T16380] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.045778][T16380] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.055873][T16380] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.064819][T16380] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.079133][T16380] GDTR: limit=0x00000000, base=0x0000000000000000 22:36:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x2000000}]}}) 22:36:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) 22:36:05 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd0q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) socket(0x100000000a, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3197.107293][T16380] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.126814][T16380] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3197.135809][T16380] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)) [ 3197.220972][T16380] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3197.229731][T16380] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3197.263745][T16380] Interruptibility = 00000000 ActivityState = 00000000 [ 3197.310936][T16380] *** Host State *** [ 3197.315147][T16380] RIP = 0xffffffff811b4980 RSP = 0xffff88805bb9f8e0 [ 3197.322618][T16380] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3197.338936][T16380] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3197.380589][T16380] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3197.416905][T16380] CR0=0000000080050033 CR3=000000005eddc000 CR4=00000000001426f0 22:36:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) socket(0x100000000a, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:05 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd1q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x40000000]}]}}) [ 3197.429394][T16380] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3197.465416][T16380] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3197.499566][T16380] *** Control State *** [ 3197.509329][T16380] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3197.517658][T16380] EntryControls=0000d1ff ExitControls=002fefff [ 3197.524277][T16380] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3197.532698][T16380] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3197.540381][T16380] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3197.548787][T16380] reason=80000021 qualification=0000000000000000 [ 3197.555962][T16380] IDTVectoring: info=00000000 errcode=00000000 [ 3197.562356][T16380] TSC Offset = 0xfffff94d73d631d8 [ 3197.573166][T16380] EPT pointer = 0x000000008a72201e [ 3197.664044][T16417] *** Guest State *** [ 3197.668380][T16417] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3197.687606][T16417] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3197.697678][T16417] CR3 = 0x0000000000000000 [ 3197.702926][T16417] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3197.711104][T16417] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3197.720853][T16417] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3197.728700][T16417] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3197.735645][T16417] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3197.744013][T16417] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.753008][T16417] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.762001][T16417] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.771037][T16417] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.779988][T16417] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.788929][T16417] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.797817][T16417] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3197.806538][T16417] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.815299][T16417] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3197.824031][T16417] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3197.832820][T16417] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3197.839969][T16417] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3197.848178][T16417] Interruptibility = 00000000 ActivityState = 00000000 [ 3197.855112][T16417] *** Host State *** [ 3197.859180][T16417] RIP = 0xffffffff811b4980 RSP = 0xffff88805c05f8e0 [ 3197.865877][T16417] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3197.873205][T16417] FSBase=00007f696e2bf700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3197.882822][T16417] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3197.889772][T16417] CR0=0000000080050033 CR3=000000005eddc000 CR4=00000000001426e0 [ 3197.897582][T16417] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3197.904978][T16417] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3197.911816][T16417] *** Control State *** [ 3197.915999][T16417] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3197.923414][T16417] EntryControls=0000d1ff ExitControls=002fefff [ 3197.929636][T16417] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3197.937526][T16417] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3197.944906][T16417] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3197.952269][T16417] reason=80000021 qualification=0000000000000000 [ 3197.959354][T16417] IDTVectoring: info=00000000 errcode=00000000 22:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffff, 0x80) mq_timedsend(r3, &(0x7f0000000240)="c8631a5f9ff296570dc33bc5492a97eed1727fa5f48dc3b442885033a414ee01dc35ec73d0c42c79eedb39ca300e5f45aa58b77caedf15ad78fb7d5900282a8a39d5933ffb22ecfde640b7d0d5a7e0e8bf54631e9467546d36408ea68007abd4f70fbd60476bf8ba4aed1d5e161841ec1c194d", 0x73, 0x3ff, &(0x7f0000000400)={0x0, 0x1c9c380}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/328]) 22:36:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)) 22:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) socket(0x100000000a, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd2q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3197.965507][T16417] TSC Offset = 0xfffff94d0d9820b2 [ 3197.970617][T16417] EPT pointer = 0x0000000099b7201e 22:36:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x3f000000}]}}) 22:36:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)) [ 3198.119429][T16431] *** Guest State *** [ 3198.135823][T16431] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3198.172780][T16431] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:06 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3198.239295][T16431] CR3 = 0x0000000000000000 [ 3198.248164][T16431] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3198.264228][T16431] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd3q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3198.292730][T16431] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3198.332502][T16431] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}}) [ 3198.367809][T16431] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0xfdfdffff]}]}}) [ 3198.412091][T16431] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.447276][T16431] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.472052][T16431] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.511709][T16431] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.522740][T16431] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.560882][T16431] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.584294][T16431] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3198.593518][T16431] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.609678][T16431] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3198.622344][T16431] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3198.640710][T16431] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3198.651559][T16431] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3198.664426][T16431] Interruptibility = 00000000 ActivityState = 00000000 [ 3198.672126][T16431] *** Host State *** [ 3198.676172][T16431] RIP = 0xffffffff811b4980 RSP = 0xffff8880373df8e0 [ 3198.683084][T16431] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3198.690353][T16431] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3198.698940][T16431] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3198.705552][T16431] CR0=0000000080050033 CR3=0000000065773000 CR4=00000000001426f0 [ 3198.713374][T16431] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3198.720840][T16431] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3198.727739][T16431] *** Control State *** [ 3198.731913][T16431] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3198.740135][T16431] EntryControls=0000d1ff ExitControls=002fefff [ 3198.746394][T16431] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3198.754235][T16431] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3198.761742][T16431] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3198.769137][T16431] reason=80000021 qualification=0000000000000000 [ 3198.776179][T16431] IDTVectoring: info=00000000 errcode=00000000 [ 3198.782404][T16431] TSC Offset = 0xfffff94ccf3aee14 [ 3198.787523][T16431] EPT pointer = 0x000000008a03a01e 22:36:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x2dd, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x2, &(0x7f0000000000)={{}, {0xe}}) 22:36:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:07 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd4q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x40000000}]}}) 22:36:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5421, &(0x7f0000000000)={{}, {0xe}}) 22:36:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:07 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd5q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x0, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=0x7f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5450, &(0x7f0000000000)={{}, {0xe}}) [ 3199.212472][T16486] *** Guest State *** 22:36:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3199.241149][T16486] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3199.327951][T16486] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3199.348190][T16486] CR3 = 0x0000000000000000 [ 3199.355735][T16486] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:36:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0xffff8000]}]}}) 22:36:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5451, &(0x7f0000000000)={{}, {0xe}}) 22:36:07 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd6q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3199.381390][T16486] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3199.402994][T16486] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3199.425050][T16486] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3199.455474][T16486] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3199.470482][T16486] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5452, &(0x7f0000000000)={{}, {0xe}}) [ 3199.508382][T16486] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.556844][T16486] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.573798][T16486] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.573816][T16486] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.602401][T16486] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.612070][T16486] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3199.633546][T16486] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.662926][T16486] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3199.679534][T16486] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3199.694435][T16486] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3199.714619][T16486] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3199.725606][T16486] Interruptibility = 00000000 ActivityState = 00000000 [ 3199.733182][T16486] *** Host State *** [ 3199.737600][T16486] RIP = 0xffffffff811b4980 RSP = 0xffff88805af6f8e0 [ 3199.744441][T16486] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3199.752104][T16486] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3199.760942][T16486] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3199.767792][T16486] CR0=0000000080050033 CR3=00000000a007a000 CR4=00000000001426e0 [ 3199.775562][T16486] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3199.783045][T16486] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3199.789866][T16486] *** Control State *** [ 3199.794015][T16486] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3199.801484][T16486] EntryControls=0000d1ff ExitControls=002fefff [ 3199.807793][T16486] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3199.815416][T16486] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3199.822850][T16486] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3199.830224][T16486] reason=80000021 qualification=0000000000000000 [ 3199.837346][T16486] IDTVectoring: info=00000000 errcode=00000000 [ 3199.843505][T16486] TSC Offset = 0xfffff94c3b5df168 [ 3199.848621][T16486] EPT pointer = 0x0000000096b5c01e 22:36:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0xfdfdffff}]}}) 22:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5460, &(0x7f0000000000)={{}, {0xe}}) 22:36:08 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd7q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x17, 0x3}}, 0x14) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 22:36:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40049409, &(0x7f0000000000)={{}, {0xe}}) 22:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0xfffffdfd]}]}}) 22:36:08 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd8q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x4020940d, &(0x7f0000000000)={{}, {0xe}}) 22:36:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000480), 0x4) ptrace$getregset(0x4204, r3, 0x204, &(0x7f00000001c0)={&(0x7f00000000c0)=""/235, 0xeb}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x1) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0x1, 0x3}, &(0x7f0000000280)=0x10) write$smack_current(r4, &(0x7f00000004c0)='/dev/kvm\x00', 0x9) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000400)={r5, 0x4a75}, &(0x7f0000000440)=0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0xffff8000}]}}) 22:36:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:09 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xd9q\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10080, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2df, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:36:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{}, {0xe}}) 22:36:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40a85323, &(0x7f0000000000)={{}, {0xe}}) 22:36:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x80ffff00000000]}]}}) 22:36:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x0, 0x106000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {0xf000}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400000, 0x0) 22:36:09 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xdaq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40bc5311, &(0x7f0000000000)={{}, {0xe}}) [ 3201.420174][T16608] *** Guest State *** [ 3201.425348][T16608] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3201.436392][T16608] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3201.463249][T16608] CR3 = 0x0000000000000000 [ 3201.472030][T16608] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3201.482775][T16608] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3201.496557][T16608] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3201.504072][T16608] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3201.528258][T16608] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3201.545772][T16608] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.554976][T16608] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.563976][T16608] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.574630][T16608] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.583923][T16608] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.592792][T16608] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.601549][T16608] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3201.610402][T16608] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x000000000000f000 [ 3201.619484][T16608] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3201.628340][T16608] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3201.637200][T16608] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3201.645804][T16608] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3201.654125][T16608] Interruptibility = 00000000 ActivityState = 00000000 [ 3201.661108][T16608] *** Host State *** [ 3201.665030][T16608] RIP = 0xffffffff811b4980 RSP = 0xffff8880543b78e0 [ 3201.671876][T16608] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3201.679058][T16608] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3201.687672][T16608] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3201.695940][T16608] CR0=0000000080050033 CR3=00000000a17cf000 CR4=00000000001426f0 [ 3201.703780][T16608] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3201.711215][T16608] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3201.718144][T16608] *** Control State *** [ 3201.722318][T16608] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3201.729759][T16608] EntryControls=0000d1ff ExitControls=002fefff [ 3201.735928][T16608] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3201.743616][T16608] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3201.751071][T16608] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3201.758420][T16608] reason=80000021 qualification=0000000000000000 [ 3201.765445][T16608] IDTVectoring: info=00000000 errcode=00000000 [ 3201.771675][T16608] TSC Offset = 0xfffff94b0a341798 [ 3201.776806][T16608] EPT pointer = 0x000000005b14c01e 22:36:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0xfffffdfd}]}}) 22:36:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045300, &(0x7f0000000000)={{}, {0xe}}) 22:36:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:10 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xdbq\x01\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2000000000000000}, {}, {0x0, 0xf000, 0x1c}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffff054]}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$alg(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000000c0)="cf2e15e74064a536f5b024e67d8bec62b0e8673d1e52e3721a4bda53b3c7423c839340fae9203bf8f1c12ccae3c466395b2bbbc9a5a9234be869d67a81a6745ba31af9c90df9c99edb8c250bbbdfcebb782abb9de40458f10f67f765a6491409a3652cd369dc4c9ba23aca6a61301aca0b5670edee8bdff8fa55c86cb1d6cbea972609f3af48bd57abb930cd9a4b28987726f9043c1039c5a704f0753df19af15f66c3ad787e0b42c944b2bea0b09de3754b35714fabf1532df66f2a9c973d8dc4ddd44f55c231f2ae773a3bd3159502e0db67", 0xd3}, {&(0x7f00000001c0)="2c3de32f1f3ed2ada4627fe183b6fb", 0xf}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000200)="a38b4531fc028dd69a82850fcd", 0xd}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000240)="7324f309a0c0ec80f7147a2ea2f1eba410bdde1e015ffb90e4db0b832c5c8fc20e54c8b84dbbb8c26973da405748005ae68d04f63c3746e352002bd75d8e90e617f716abd900cb23bfe422924cb35656860ba88ae105a56243baef356dbf7e3c171ca7207562ea", 0x67}], 0x6, &(0x7f0000002480)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xd66}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x80}, 0x40) 22:36:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045301, &(0x7f0000000000)={{}, {0xe}}) 22:36:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3202.024402][T16634] *** Guest State *** [ 3202.029513][T16634] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3202.039676][T16634] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3202.057825][T16634] CR3 = 0x0000000000000000 [ 3202.067461][T16634] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3202.088718][T16634] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3202.114521][T16634] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3202.122028][T16634] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3202.142521][T16634] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3202.150782][T16634] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3202.163229][T16634] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3202.174563][T16634] SS: sel=0x0000, attr=0x10000, limit=0xfffffffe, base=0x0000000000000000 [ 3202.187190][T16634] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3202.195898][T16634] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3202.204901][T16634] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3202.213752][T16634] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3202.226384][T16634] LDTR: sel=0x001c, attr=0x10000, limit=0x0000f000, base=0x0000000000000000 [ 3202.235372][T16634] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3202.244407][T16634] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3202.254046][T16634] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3202.261518][T16634] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3202.272413][T16634] Interruptibility = 00000000 ActivityState = 00000000 [ 3202.287460][T16634] *** Host State *** [ 3202.292321][T16634] RIP = 0xffffffff811b4980 RSP = 0xffff88806336f8e0 [ 3202.299314][T16634] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3202.306645][T16634] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3202.315291][T16634] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3202.339843][T16634] CR0=0000000080050033 CR3=00000000877ca000 CR4=00000000001426f0 [ 3202.347827][T16634] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3202.355336][T16634] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3202.362793][T16634] *** Control State *** [ 3202.367172][T16634] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000ce [ 3202.374826][T16634] EntryControls=0000d1ff ExitControls=002fefff [ 3202.381247][T16634] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x100000000000000]}]}}) 22:36:10 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x03\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0045878, &(0x7f0000000000)={{}, {0xe}}) 22:36:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3202.392395][T16634] VMEntry: intr_info=800000c2 errcode=00000000 ilen=00000000 [ 3202.401787][T16634] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3202.410561][T16634] reason=80000021 qualification=0000000000000000 22:36:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0045878, &(0x7f0000000000)={{}, {0xe}}) [ 3202.468614][T16634] IDTVectoring: info=00000000 errcode=00000000 [ 3202.476987][T16634] TSC Offset = 0xfffff94ab72b4a51 [ 3202.487140][T16634] EPT pointer = 0x000000008edbe01e 22:36:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x80ffff00000000}]}}) 22:36:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0105303, &(0x7f0000000000)={{}, {0xe}}) 22:36:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e21, 0x100000001, @remote, 0x1000}}, 0x80000001, 0x5, 0x20000, 0x2, 0x1}, 0x98) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:11 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0189436, &(0x7f0000000000)={{}, {0xe}}) 22:36:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10005, 0x2, 0x0, 0x2000, &(0x7f000003d000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x214000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000000c0)={{0x5, 0x4}, 'port0\x00', 0x2, 0x10000, 0x7, 0x9, 0x0, 0x4, 0x7ff, 0x0, 0x4, 0x1f}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3203.031223][T16688] *** Guest State *** [ 3203.037374][T16688] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3203.057115][T16688] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3203.068400][T16688] CR3 = 0x0000000000000000 [ 3203.073038][T16688] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3203.080930][T16688] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3203.089466][T16688] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3203.096257][T16688] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3203.103189][T16688] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3203.110951][T16688] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.119750][T16688] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.128729][T16688] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.138881][T16688] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.147692][T16688] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.156395][T16688] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.165216][T16688] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3203.174002][T16688] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.182864][T16688] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3203.191617][T16688] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3203.200375][T16688] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3203.207690][T16688] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3203.215851][T16688] Interruptibility = 00000000 ActivityState = 00000000 [ 3203.223768][T16688] *** Host State *** [ 3203.227790][T16688] RIP = 0xffffffff811b4980 RSP = 0xffff88806f8c78e0 [ 3203.234480][T16688] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3203.241658][T16688] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3203.252829][T16688] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3203.259488][T16688] CR0=0000000080050033 CR3=000000005790c000 CR4=00000000001426e0 [ 3203.267280][T16688] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3203.274668][T16688] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3203.281483][T16688] *** Control State *** [ 3203.285653][T16688] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3203.285662][T16688] EntryControls=0000d1ff ExitControls=002fefff [ 3203.285677][T16688] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3203.285687][T16688] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3203.285698][T16688] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3203.285706][T16688] reason=80000021 qualification=0000000000000000 [ 3203.285714][T16688] IDTVectoring: info=00000000 errcode=00000000 [ 3203.285728][T16688] TSC Offset = 0xfffff94a2db918e0 [ 3203.323101][T16688] EPT pointer = 0x00000000500ca01e 22:36:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x200000000000000]}]}}) 22:36:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc020660b, &(0x7f0000000000)={{}, {0xe}}) 22:36:11 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000580)={0x80000001, 0x6b}) r5 = getegid() getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000400)) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x8000, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vfio/vfio\x00'}}, {@measure='measure'}]}}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x100000000000000}]}}) 22:36:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0305302, &(0x7f0000000000)={{}, {0xe}}) 22:36:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) io_setup(0xbe, &(0x7f0000000000)=0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001600)='/dev/ubi_ctrl\x00', 0x20500, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x900040}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r3, 0x4, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3e5e, r2, &(0x7f0000000400)="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", 0x1000, 0x5, 0x0, 0x0, r6}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000000140)="e1953aef90627ca76c528e5182b4086419b97f39141cc58abc9fca7d8091e430eafc2b065bafa1d96a1111af7e7a0d9e2144d65e5506153aa891d898ac906b5152f085464eceb7ee33f00ebad760646737f7b33bd916d2d950ca3f9c0f7d5491ffa2159dbd", 0x65, 0xfffffffffffffffc, 0x0, 0x2, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000001400)="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", 0xfd, 0x1000, 0x0, 0x2, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0xa93, r1, &(0x7f0000001500)="2e2d5a66ce5fd2a0039101e50ee2a46ea2ff38a7da89ebd0a84964fd503df8370a0a7519d41c5e2052763289ec58331ca361b36825a3343814bd49859fd82ab13e25df59e1779330399ea6a24147aedd4b9711f799dbd445f1579e228901710dda500843cdfdec66076f063ace72b3eb09fde7654e2c76a3c62da82ab692cc9f774eacbe434ddb71c06aad77dbea81ba803fada8b68820033fbb6de35988f3d0efd0e2b1070122b501db2bdf2605aad1fcd108e0d0beb94a742a7eef588fda90e9a279490b2ccf5159dc0136483729971f72303195d52d4eb856c01ab8b96fb3301d97a5e528", 0xe6, 0xb1d9, 0x0, 0x2, 0xffffffffffffff9c}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:12 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{}, {0xe}}) 22:36:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x3f00000000000000]}]}}) 22:36:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000000)={{}, {0xe}}) 22:36:12 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x907c0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r3, r4, 0x0, 0x1}, 0x10) 22:36:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3204.368295][T16750] *** Guest State *** [ 3204.394350][T16750] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3204.424761][T16750] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3204.450280][T16750] CR3 = 0x0000000000000000 [ 3204.455030][T16750] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3204.476051][T16750] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3204.495188][T16750] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3204.525192][T16750] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3204.532266][T16750] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3204.539944][T16750] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.548947][T16750] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.557966][T16750] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.567252][T16750] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.576086][T16750] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.585127][T16750] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.594162][T16750] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3204.603101][T16750] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.612030][T16750] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3204.621017][T16750] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3204.629865][T16750] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3204.637228][T16750] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3204.645542][T16750] Interruptibility = 00000000 ActivityState = 00000000 [ 3204.652741][T16750] *** Host State *** [ 3204.658262][T16750] RIP = 0xffffffff811b4980 RSP = 0xffff88805af6f8e0 [ 3204.665099][T16750] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3204.672417][T16750] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3204.672430][T16750] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3204.672444][T16750] CR0=0000000080050033 CR3=000000008b668000 CR4=00000000001426e0 [ 3204.672459][T16750] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3204.672471][T16750] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3204.672476][T16750] *** Control State *** [ 3204.672486][T16750] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:36:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x200000000000000}]}}) 22:36:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0bc5310, &(0x7f0000000000)={{}, {0xe}}) 22:36:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:13 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3204.672494][T16750] EntryControls=0000d1ff ExitControls=002fefff [ 3204.672507][T16750] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3204.672517][T16750] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3204.672526][T16750] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3204.672534][T16750] reason=80000021 qualification=0000000000000000 [ 3204.672548][T16750] IDTVectoring: info=00000000 errcode=00000000 22:36:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf}, {0xe}}) [ 3204.804317][T16750] TSC Offset = 0xfffff949749f71b9 [ 3204.816513][T16750] EPT pointer = 0x000000008d71201e 22:36:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf00}, {0xe}}) 22:36:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x4000000000000000]}]}}) 22:36:13 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x2200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="3e650f0666baf80cb83ab0c18aef66bafc0cb0a3eec4e3196b77004bb86d1b13a00f23d80f21f835c00000e00f23f8b9800000c00f3235001000000f30640f01cb0f01300f01caf380e9deb9800000c00f3235000400000f30", 0x59}], 0x1, 0x8, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:13 executing program 2: syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf000000}, {0xe}}) [ 3205.322735][T16802] *** Guest State *** [ 3205.330653][T16802] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3205.344450][T16802] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3205.360638][T16802] CR3 = 0x0000000000000000 [ 3205.365362][T16802] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3205.381369][T16802] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3205.394469][T16802] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3205.402615][T16802] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3205.410194][T16802] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3205.418665][T16802] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.428125][T16802] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.437697][T16802] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.447018][T16802] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.455874][T16802] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.464791][T16802] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.473676][T16802] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3205.482512][T16802] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.492084][T16802] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3205.500923][T16802] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3205.509662][T16802] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3205.516870][T16802] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3205.525089][T16802] Interruptibility = 00000000 ActivityState = 00000000 [ 3205.532100][T16802] *** Host State *** [ 3205.536021][T16802] RIP = 0xffffffff811b4980 RSP = 0xffff88806391f8e0 [ 3205.543057][T16802] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3205.550258][T16802] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3205.558842][T16802] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3205.565526][T16802] CR0=0000000080050033 CR3=0000000098c1d000 CR4=00000000001426e0 [ 3205.573346][T16802] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3205.580809][T16802] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3205.588806][T16802] *** Control State *** [ 3205.592984][T16802] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3205.600445][T16802] EntryControls=0000d1ff ExitControls=002fefff [ 3205.606670][T16802] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3205.614303][T16802] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3205.623931][T16802] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3205.635025][T16802] reason=80000021 qualification=0000000000000000 [ 3205.644420][T16802] IDTVectoring: info=00000000 errcode=00000000 [ 3205.655118][T16802] TSC Offset = 0xfffff948f86e847a [ 3205.662926][T16802] EPT pointer = 0x000000008e4c701e 22:36:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x3f00000000000000}]}}) 22:36:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x8000000000000000}, {0xe}}) 22:36:14 executing program 2: syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:14 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf00000000000000}, {0xe}}) 22:36:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x7) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:14 executing program 2: syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3205.989809][T16835] *** Guest State *** [ 3206.002324][T16835] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3206.012811][T16835] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3206.024946][T16835] CR3 = 0x0000000000000000 [ 3206.029961][T16835] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3206.037627][T16835] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3206.045105][T16835] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3206.052328][T16835] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3206.059416][T16835] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3206.067171][T16835] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.087439][T16835] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.102762][T16835] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.113050][T16835] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.122117][T16835] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.141821][T16835] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.151858][T16835] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3206.160866][T16835] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.169842][T16835] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3206.179224][T16835] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0xfdfdffff00000000]}]}}) 22:36:14 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0xbf}, {0xe}}) 22:36:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3206.188181][T16835] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3206.195478][T16835] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3206.203882][T16835] Interruptibility = 00000000 ActivityState = 00000000 [ 3206.224501][T16835] *** Host State *** [ 3206.232667][T16835] RIP = 0xffffffff811b4980 RSP = 0xffff8880373f78e0 22:36:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0xbf00}, {0xe}}) [ 3206.244464][T16835] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3206.279205][T16835] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3206.338156][T16835] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3206.345373][T16835] CR0=0000000080050033 CR3=000000008e483000 CR4=00000000001426e0 [ 3206.353470][T16835] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3206.367287][T16835] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3206.411893][T16835] *** Control State *** [ 3206.429140][T16835] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3206.453217][T16835] EntryControls=0000d1ff ExitControls=002fefff [ 3206.462766][T16835] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3206.471106][T16835] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3206.479095][T16835] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3206.491380][T16835] reason=80000021 qualification=0000000000000000 [ 3206.499096][T16835] IDTVectoring: info=00000000 errcode=00000000 [ 3206.505273][T16835] TSC Offset = 0xfffff9489975a90d [ 3206.510416][T16835] EPT pointer = 0x000000005e62101e [ 3206.569455][T16860] *** Guest State *** [ 3206.573687][T16860] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3206.584158][T16860] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3206.594353][T16860] CR3 = 0x0000000000000000 [ 3206.599639][T16860] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3206.606996][T16860] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3206.607008][T16860] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3206.607020][T16860] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3206.607037][T16860] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3206.607052][T16860] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.607082][T16860] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.607102][T16860] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.607120][T16860] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.607141][T16860] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.628482][T16860] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.688706][T16860] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3206.697492][T16860] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.697504][T16860] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3206.697520][T16860] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3206.697530][T16860] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3206.697541][T16860] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3206.697551][T16860] Interruptibility = 00000000 ActivityState = 00000000 [ 3206.697556][T16860] *** Host State *** [ 3206.697568][T16860] RIP = 0xffffffff811b4980 RSP = 0xffff88805be2f8e0 [ 3206.697591][T16860] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:36:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x4000000000000000}]}}) 22:36:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0xbf000000}, {0xe}}) 22:36:15 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3206.697603][T16860] FSBase=00007f696e2bf700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3206.697622][T16860] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 22:36:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0x8000000000000000}, {0xe}}) [ 3206.852800][T16860] CR0=0000000080050033 CR3=000000008e483000 CR4=00000000001426f0 [ 3206.861243][T16860] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3206.870036][T16860] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3206.879298][T16860] *** Control State *** [ 3206.883786][T16860] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3206.929518][T16860] EntryControls=0000d1ff ExitControls=002fefff [ 3206.943942][T16860] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3206.960905][T16860] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3206.977035][T16860] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3206.985015][T16860] reason=80000021 qualification=0000000000000000 [ 3206.999859][T16860] IDTVectoring: info=00000000 errcode=00000000 [ 3207.007819][T16860] TSC Offset = 0xfffff94847a170d9 [ 3207.013135][T16860] EPT pointer = 0x000000009539f01e 22:36:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000440)='.dead\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000400)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '/dev/kvm\x00', 0x20, 0x7f}, 0x34, r4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syncfs(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f00000000c0)="826a0f65523725cc4d1c3729efb2c7b8c200e5b05d6fdf4539a0e2455d0dac665e13a0a7d22d4b7df6fabbe6e38409b888a7c4e74fb114fae884c5e8a9db1d2ef54d3a6c8914ddb0efb56843b862a470d3714a17f95693234d6870b009fb52a0480a8c88a559ffc4b9c356add29d36ab7595ce8773da1d42ad77429a340e9cfd75", &(0x7f0000000180)=""/145}, 0x18) r5 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VT_RELDISP(r5, 0x5605) 22:36:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0xffffffff00000000]}]}}) 22:36:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0xbf00000000000000}, {0xe}}) 22:36:15 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3207.239414][T16891] *** Guest State *** 22:36:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xbf}}) [ 3207.275289][T16891] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3207.318903][T16891] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3207.334413][T16891] CR3 = 0x0000000000000000 [ 3207.342007][T16891] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3207.349891][T16891] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3207.358236][T16891] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3207.365161][T16891] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3207.375948][T16891] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3207.384775][T16891] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.393941][T16891] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.403652][T16891] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.412696][T16891] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.461182][T16891] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.481447][T16891] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.496523][T16891] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3207.513526][T16891] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.523966][T16891] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3207.532991][T16891] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3207.541857][T16891] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3207.549153][T16891] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3207.558036][T16891] Interruptibility = 00000000 ActivityState = 00000000 [ 3207.565021][T16891] *** Host State *** [ 3207.569025][T16891] RIP = 0xffffffff811b4980 RSP = 0xffff8880578bf8e0 [ 3207.575739][T16891] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3207.583002][T16891] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3207.591650][T16891] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3207.599274][T16891] CR0=0000000080050033 CR3=00000000a7bb8000 CR4=00000000001426f0 [ 3207.607104][T16891] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3207.614613][T16891] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3207.623297][T16891] *** Control State *** [ 3207.628305][T16891] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3207.635681][T16891] EntryControls=0000d1ff ExitControls=002fefff [ 3207.635696][T16891] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3207.635706][T16891] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3207.635716][T16891] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3207.635725][T16891] reason=80000021 qualification=0000000000000000 [ 3207.635733][T16891] IDTVectoring: info=00000000 errcode=00000000 [ 3207.635740][T16891] TSC Offset = 0xfffff947ef91aea6 [ 3207.635749][T16891] EPT pointer = 0x000000005e7de01e 22:36:16 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe, 0xbf}}) 22:36:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0xfdfdffff00000000}]}}) 22:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8802, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000000c0)=0x8400008) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe, 0xbf00}}) 22:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x2]}]}}) 22:36:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe, 0xbf000000}}) 22:36:16 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x2, 0x8906, 0x0, 0x2, 0x724097ef, 0x9, 0x401, 0x5, 0x30000000, 0x100000000, 0x79f, 0x80000000, 0x6, 0x6, 0x4, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe, 0x8000000000000000}}) [ 3208.217917][T16952] *** Guest State *** [ 3208.235394][T16952] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3208.254512][T16952] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3208.282127][T16952] CR3 = 0x0000000000000000 [ 3208.290775][T16952] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3208.300407][T16952] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3208.308206][T16952] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3208.315105][T16952] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3208.322442][T16952] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3208.330622][T16952] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.340669][T16952] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.364230][T16952] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.412043][T16952] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.423966][T16952] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.434559][T16952] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.447369][T16952] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3208.456074][T16952] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.456088][T16952] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3208.456106][T16952] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3208.456118][T16952] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3208.456130][T16952] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3208.456140][T16952] Interruptibility = 00000000 ActivityState = 00000000 [ 3208.456146][T16952] *** Host State *** [ 3208.456158][T16952] RIP = 0xffffffff811b4980 RSP = 0xffff88806391f8e0 [ 3208.456180][T16952] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3208.482540][T16952] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3208.482554][T16952] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3208.482568][T16952] CR0=0000000080050033 CR3=000000005d3a3000 CR4=00000000001426e0 [ 3208.482589][T16952] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3208.498206][T16952] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3208.564017][T16952] *** Control State *** [ 3208.568459][T16952] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3208.589318][T16952] EntryControls=0000d1ff ExitControls=002fefff [ 3208.597327][T16952] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3208.615768][T16952] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 22:36:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x2]}]}}) 22:36:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe, 0xbf00000000000000}}) 22:36:16 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3208.659092][T16952] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3208.672854][T16952] reason=80000021 qualification=0000000000000000 [ 3208.690482][T16952] IDTVectoring: info=00000000 errcode=00000000 [ 3208.723574][T16952] TSC Offset = 0xfffff94767ff52d5 [ 3208.732605][T16952] EPT pointer = 0x00000000875d201e 22:36:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0xbf}) 22:36:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x3f00]}]}}) 22:36:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0xbf00}) 22:36:17 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003e000/0x18000)=nil, 0x0, 0x222, 0x0, 0x0, 0xfffffffffffffea6) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x111000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0xbf000000}) [ 3209.131166][T17002] *** Guest State *** [ 3209.135202][T17002] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3209.135221][T17002] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3209.135228][T17002] CR3 = 0x0000000000000000 [ 3209.135242][T17002] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3209.135255][T17002] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3209.135271][T17002] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3209.160820][T17002] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3209.189649][T17002] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3209.197592][T17002] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.211431][T17002] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.224531][T17002] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.235148][T17002] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.244548][T17002] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.253838][T17002] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.269385][T17002] GDTR: limit=0x00000000, base=0x0000000000000000 22:36:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3209.278659][T17002] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.297646][T17002] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3209.339901][T17002] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.349483][T17002] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3209.357196][T17002] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3209.365552][T17002] Interruptibility = 00000000 ActivityState = 00000000 [ 3209.372755][T17002] *** Host State *** [ 3209.387276][T17002] RIP = 0xffffffff811b4980 RSP = 0xffff88806336f8e0 [ 3209.394126][T17002] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3209.402556][T17002] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3209.412337][T17002] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3209.419112][T17002] CR0=0000000080050033 CR3=0000000057121000 CR4=00000000001426f0 [ 3209.432117][T17002] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3209.441024][T17002] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3209.451415][T17002] *** Control State *** [ 3209.455683][T17002] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3209.470700][T17002] EntryControls=0000d1ff ExitControls=002fefff [ 3209.480306][T17002] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3209.491272][T17002] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3209.501383][T17002] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3209.512884][T17002] reason=80000021 qualification=0000000000000000 [ 3209.522301][T17002] IDTVectoring: info=00000000 errcode=00000000 [ 3209.530832][T17002] TSC Offset = 0xfffff946ed5fc8f0 [ 3209.535863][T17002] EPT pointer = 0x00000000a48f601e 22:36:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x3f00]}]}}) 22:36:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x8000000000000000}) 22:36:17 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3209.729238][T17028] *** Guest State *** [ 3209.748000][T17028] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3209.797152][T17028] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3209.808661][T17028] CR3 = 0x0000000000000000 [ 3209.813322][T17028] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3209.837790][T17028] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3209.863634][T17028] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3209.873012][T17028] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3209.884337][T17028] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3209.892351][T17028] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.901267][T17028] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.911504][T17028] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.921317][T17028] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.930761][T17028] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.950859][T17028] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3209.961151][T17028] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3209.971523][T17028] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x4000]}]}}) 22:36:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0xbf00000000000000}) 22:36:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:18 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3209.980525][T17028] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3209.990473][T17028] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3210.000669][T17028] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:36:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf}) [ 3210.059123][T17028] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3210.072704][T17028] Interruptibility = 00000000 ActivityState = 00000000 [ 3210.088771][T17028] *** Host State *** [ 3210.093739][T17028] RIP = 0xffffffff811b4980 RSP = 0xffff888054ecf8e0 22:36:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf00}) [ 3210.119916][T17028] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:36:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3210.174804][T17028] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3210.203878][T17028] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3210.211587][T17028] CR0=0000000080050033 CR3=0000000062997000 CR4=00000000001426f0 [ 3210.220219][T17028] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3210.228601][T17028] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3210.258695][T17028] *** Control State *** [ 3210.267495][T17028] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3210.286021][T17028] EntryControls=0000d1ff ExitControls=002fefff [ 3210.304451][T17028] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3210.313894][T17028] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3210.321360][T17028] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3210.329058][T17028] reason=80000021 qualification=0000000000000000 [ 3210.336096][T17028] IDTVectoring: info=00000000 errcode=00000000 [ 3210.342810][T17028] TSC Offset = 0xfffff94697df4620 [ 3210.348213][T17028] EPT pointer = 0x000000005a7d301e 22:36:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x4000]}]}}) 22:36:18 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\"', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf000000}) 22:36:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x16a) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x80ffff]}]}}) 22:36:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x8000000000000000}) 22:36:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x82, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:19 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000000c0)={{0x0, 0x8}, 'port1\x00', 0x69, 0x20000, 0x0, 0x4, 0x3, 0x3, 0x10000, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf00000000000000}) 22:36:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x80) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3211.017761][T17104] *** Guest State *** [ 3211.025348][T17104] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3211.047734][T17104] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3211.081784][T17104] CR3 = 0x0000000000000000 [ 3211.086557][T17104] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3211.101837][T17104] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3211.113695][T17104] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3211.132151][T17104] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3211.142992][T17104] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3211.164499][T17104] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.173735][T17104] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.183114][T17104] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.193113][T17104] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.202418][T17104] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.211255][T17104] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.211269][T17104] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3211.211288][T17104] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.211299][T17104] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3211.211315][T17104] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.211332][T17104] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3211.211344][T17104] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3211.211354][T17104] Interruptibility = 00000000 ActivityState = 00000000 [ 3211.211360][T17104] *** Host State *** [ 3211.211372][T17104] RIP = 0xffffffff811b4980 RSP = 0xffff888063fcf8e0 [ 3211.211393][T17104] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3211.211406][T17104] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3211.211417][T17104] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3211.211432][T17104] CR0=0000000080050033 CR3=000000005702c000 CR4=00000000001426e0 [ 3211.211447][T17104] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3211.211462][T17104] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3211.235473][T17104] *** Control State *** [ 3211.254037][T17104] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3211.289602][T17104] EntryControls=0000d1ff ExitControls=002fefff [ 3211.315935][T17104] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3211.359826][T17104] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3211.367283][T17104] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3211.374629][T17104] reason=80000021 qualification=0000000000000000 [ 3211.381734][T17104] IDTVectoring: info=00000000 errcode=00000000 [ 3211.387961][T17104] TSC Offset = 0xfffff945e90344b5 [ 3211.392990][T17104] EPT pointer = 0x0000000090aca01e 22:36:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x80ffff]}]}}) 22:36:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0xbf}) 22:36:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:19 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{0xf000, 0x6000, 0xf, 0xb, 0xfc8, 0x200, 0x5, 0x7ec, 0x100, 0x8, 0x1000, 0x81}, {0xf000, 0x6004, 0x1f, 0x100000000, 0x8f, 0x80800, 0x3f, 0x4, 0x2, 0xfffffffffffff801, 0x0, 0x81}, {0xd007, 0x5000, 0xf, 0x3, 0x44ab8c32, 0xd746, 0x81, 0x6, 0x2, 0xf, 0x100, 0xfffffffffffffff7}, {0xd002, 0xd000, 0xe, 0xffffffff, 0x7fd, 0x4, 0x0, 0x80000001, 0x1, 0x7ff, 0x1, 0x4}, {0x1, 0x10f003, 0x4, 0x10000, 0x0, 0x6, 0x1, 0x800, 0x8000000, 0x7f, 0x1}, {0x106004, 0x3000, 0xf, 0x2, 0x7, 0x9af9, 0x3, 0x2, 0x6, 0x0, 0x4c8, 0xfff}, {0x10000, 0x106000, 0xd, 0x2, 0xc3, 0x7f, 0x6, 0x6, 0x5, 0x8, 0xfff, 0x4}, {0x5000, 0x6000, 0xe, 0x7200, 0x80000001, 0x7f, 0x6, 0x20, 0x5, 0x81, 0xfffffffffffffff8, 0x4}, {0x1, 0x115000}, {0x0, 0x5000}, 0x80000020, 0x0, 0xd000, 0x0, 0xd, 0x900, 0x0, [0x9, 0x1, 0x69, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3211.584883][T17126] *** Guest State *** [ 3211.607914][T17126] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3211.631251][T17126] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3211.642484][T17126] CR3 = 0x0000000000000000 [ 3211.647625][T17126] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3211.655146][T17126] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3211.663499][T17126] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3211.671123][T17126] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3211.692970][T17126] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3211.702239][T17126] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.711325][T17126] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.720644][T17126] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.729742][T17126] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.738936][T17126] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.747978][T17126] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.757105][T17126] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3211.766459][T17126] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.775490][T17126] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3211.784494][T17126] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3211.794853][T17126] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3211.802622][T17126] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3211.811109][T17126] Interruptibility = 00000000 ActivityState = 00000000 [ 3211.818350][T17126] *** Host State *** [ 3211.822495][T17126] RIP = 0xffffffff811b4980 RSP = 0xffff888063fcf8e0 [ 3211.829489][T17126] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3211.836919][T17126] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3211.845746][T17126] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3211.852932][T17126] CR0=0000000080050033 CR3=00000000a7eca000 CR4=00000000001426f0 [ 3211.861161][T17126] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3211.868902][T17126] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3211.876799][T17126] *** Control State *** [ 3211.881231][T17126] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3211.889075][T17126] EntryControls=0000d1ff ExitControls=002fefff [ 3211.895476][T17126] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x1000000]}]}}) 22:36:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0xbf00}) 22:36:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x0, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3211.903412][T17126] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3211.911100][T17126] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3211.918787][T17126] reason=80000021 qualification=0000000000000000 [ 3211.926365][T17126] IDTVectoring: info=00000000 errcode=00000000 [ 3211.932926][T17126] TSC Offset = 0xfffff9459a2b9d01 [ 3211.938365][T17126] EPT pointer = 0x000000008eb0d01e 22:36:20 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0xbf000000}) 22:36:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x0, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff9000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0xfffffffffffffe0b) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3212.268378][T17166] *** Guest State *** [ 3212.272406][T17166] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3212.305385][T17166] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3212.316318][T17166] CR3 = 0x0000000000000000 [ 3212.321062][T17166] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3212.339999][T17166] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3212.347722][T17166] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3212.354517][T17166] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3212.362112][T17166] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3212.369778][T17166] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.378767][T17166] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.398737][T17166] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.407582][T17166] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.407601][T17166] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.407619][T17166] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.407631][T17166] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3212.407649][T17166] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.425310][T17166] IDTR: limit=0x00000000, base=0x0000000000000000 22:36:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x1000000]}]}}) 22:36:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x8000000000000000}) 22:36:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x0, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:20 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3212.462004][T17166] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3212.470837][T17166] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3212.478126][T17166] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3212.486385][T17166] Interruptibility = 00000000 ActivityState = 00000000 [ 3212.493469][T17166] *** Host State *** 22:36:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0xbf00000000000000}) [ 3212.524797][T17166] RIP = 0xffffffff811b4980 RSP = 0xffff88804633f8e0 [ 3212.552220][T17166] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3212.595123][T17166] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3212.632811][T17166] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3212.647669][T17166] CR0=0000000080050033 CR3=000000005af52000 CR4=00000000001426e0 [ 3212.659266][T17166] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3212.676084][T17166] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3212.694990][T17166] *** Control State *** [ 3212.721724][T17166] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3212.730009][T17166] EntryControls=0000d1ff ExitControls=002fefff [ 3212.736433][T17166] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3212.748334][T17166] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3212.755941][T17166] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3212.763791][T17166] reason=80000021 qualification=0000000000000000 [ 3212.771675][T17166] IDTVectoring: info=00000000 errcode=00000000 [ 3212.778037][T17166] TSC Offset = 0xfffff9453bf7c665 [ 3212.783191][T17166] EPT pointer = 0x000000008dc9701e 22:36:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0xbf]}) 22:36:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x0, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x2000000]}]}}) 22:36:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffffffe1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000140)={0x5515, 0x4, 0x7f, 0x1, "816c4e39b345b456df9d2aac954067bbda187fb054d98c29bfb7bb6ef9b7301e"}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r4, &(0x7f0000000200)=@encrypted_load={'load ', 'default', 0x20, 'user:', '', 0x20, 0x1, 0x20, [0x61, 0x7f, 0x77]}, 0x2c, 0xfffffffffffffffc) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r2, r1) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 22:36:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0xbf00]}) [ 3212.989683][T17201] *** Guest State *** [ 3213.012167][T17201] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3213.048306][T17201] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0xbf000000]}) [ 3213.059168][T17201] CR3 = 0x0000000000000000 [ 3213.063922][T17201] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3213.082697][T17201] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3213.096160][T17201] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3213.109502][T17201] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3213.149904][T17201] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3213.162974][T17201] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.172874][T17201] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.185618][T17201] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.198353][T17201] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.214445][T17201] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.224208][T17201] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.233422][T17201] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3213.246739][T17201] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.256358][T17201] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3213.273240][T17201] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3213.285172][T17201] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3213.296730][T17201] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3213.305166][T17201] Interruptibility = 00000000 ActivityState = 00000000 [ 3213.312664][T17201] *** Host State *** [ 3213.317511][T17201] RIP = 0xffffffff811b4980 RSP = 0xffff8880373f78e0 [ 3213.324252][T17201] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3213.331759][T17201] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3213.340408][T17201] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3213.347346][T17201] CR0=0000000080050033 CR3=000000005c217000 CR4=00000000001426e0 [ 3213.355777][T17201] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3213.363293][T17201] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3213.370858][T17201] *** Control State *** [ 3213.375316][T17201] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:36:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x2000000]}]}}) 22:36:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x0, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 22:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x8000000000000000]}) [ 3213.406831][T17201] EntryControls=0000d1ff ExitControls=002fefff [ 3213.424662][T17201] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3213.436813][T17201] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3213.457936][T17201] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3213.479234][T17201] reason=80000021 qualification=0000000000000000 22:36:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0xbf00000000000000]}) 22:36:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x0, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3213.518846][T17201] IDTVectoring: info=00000000 errcode=00000000 [ 3213.529834][T17201] TSC Offset = 0xfffff944d7be5b1f [ 3213.555222][T17201] EPT pointer = 0x00000000568e401e 22:36:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0xbf]}) 22:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x3f000000]}]}}) 22:36:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x5e, @broadcast, 0x4e20, 0x1, 'dh\x00', 0x6, 0x4, 0x22}, 0x2c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x42, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:36:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0xbf00]}) 22:36:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x1, 0x0) syz_execute_func(0x0) [ 3213.888455][T17257] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 22:36:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x3f000000]}]}}) 22:36:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0xbf000000]}) 22:36:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x1, 0x0) syz_execute_func(0x0) 22:36:22 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03h', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x14000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="6766c7442400100000806766c74424021a9000006766c744240600000000670f011424d9fb0f20e2440f20c0663504000000440f22c0c038870f01ca0f015d0e66b9ab0800000f32440f20c0663509000000440f22c06766c7442400000001006766c7442402030000006766c744240600000000670f011c24", 0x79}], 0x1, 0x10, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x100, 0x0, 0x876, 0x0, 0x10000}], 0x1) r3 = shmget$private(0x0, 0x1000, 0x540002b9, &(0x7f0000032000/0x1000)=nil) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000400)='veth1\x00', 0x10) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000240)=""/3) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xfffffffffffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5}) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000280)={0xdcad, 0x7, 0x7}) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x8000) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0xffff}, 0x4) 22:36:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0x8000000000000000]}) 22:36:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(0x0, 0x0, 0x0) socket(0x100000000a, 0x1, 0x0) syz_execute_func(0x0) [ 3214.492101][T17284] *** Guest State *** 22:36:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0xbf00000000000000]}) [ 3214.520284][T17284] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3214.535881][T17284] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3214.551628][T17284] CR3 = 0x0000000000000000 [ 3214.556238][T17284] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3214.602919][T17284] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3214.648571][T17284] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3214.655589][T17284] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3214.673263][T17284] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3214.681694][T17284] CS: sel=0x0000, attr=0x10000, limit=0xfffffffe, base=0x0000000000000000 [ 3214.691210][T17284] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3214.700214][T17284] SS: sel=0x0000, attr=0x10000, limit=0x00000001, base=0x0000000000000000 [ 3214.711123][T17284] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3214.719967][T17284] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3214.729894][T17284] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3214.742160][T17284] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3214.751131][T17284] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3214.776829][T17284] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3214.785863][T17284] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x40000000]}]}}) 22:36:23 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffffffe1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000140)={0x5515, 0x4, 0x7f, 0x1, "816c4e39b345b456df9d2aac954067bbda187fb054d98c29bfb7bb6ef9b7301e"}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r4, &(0x7f0000000200)=@encrypted_load={'load ', 'default', 0x20, 'user:', '', 0x20, 0x1, 0x20, [0x61, 0x7f, 0x77]}, 0x2c, 0xfffffffffffffffc) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r2, r1) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 22:36:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0x0, 0xbf]}) [ 3214.795299][T17284] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3214.803199][T17284] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3214.812008][T17284] Interruptibility = 00000000 ActivityState = 00000000 [ 3214.819642][T17284] *** Host State *** [ 3214.823838][T17284] RIP = 0xffffffff811b4980 RSP = 0xffff8880584f78e0 [ 3214.831870][T17284] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3214.870112][T17284] FSBase=00007f696e2bf700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3214.907017][T17284] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3214.935401][T17284] CR0=0000000080050033 CR3=0000000086c7b000 CR4=00000000001426e0 [ 3214.945979][T17307] *** Guest State *** [ 3214.951440][T17284] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3214.959793][T17284] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3214.964076][T17307] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3214.977208][T17307] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3214.988236][T17284] *** Control State *** [ 3215.003106][T17307] CR3 = 0x0000000000000000 [ 3215.007897][T17284] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3215.012695][T17307] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3215.024554][T17284] EntryControls=0000d1ff ExitControls=002fefff [ 3215.025505][T17307] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3215.031432][T17284] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3215.038995][T17307] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3215.053554][T17307] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3215.061084][T17284] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3215.061155][T17307] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3215.076918][T17307] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.085787][T17284] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3215.085809][T17307] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.102545][T17307] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.106502][T17284] reason=80000021 qualification=0000000000000000 [ 3215.111788][T17307] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.128993][T17307] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.139515][T17284] IDTVectoring: info=00000000 errcode=00000000 [ 3215.146512][T17307] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.155895][T17284] TSC Offset = 0xfffff944174a9b95 [ 3215.158465][T17307] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3215.167998][T17284] EPT pointer = 0x000000008da5201e [ 3215.170241][T17307] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.184365][T17307] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3215.199996][T17307] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3215.225562][T17307] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3215.234663][T17307] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3215.245456][T17307] Interruptibility = 00000000 ActivityState = 00000000 [ 3215.278033][T17307] *** Host State *** 22:36:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0x0, 0xbf00]}) 22:36:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x40000000]}]}}) 22:36:23 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3215.299175][T17307] RIP = 0xffffffff811b4980 RSP = 0xffff88806336f8e0 [ 3215.307626][T17307] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3215.319215][T17307] FSBase=00007f6a5c606700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3215.328156][T17307] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 22:36:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0x0, 0xbf000000]}) [ 3215.398507][T17307] CR0=0000000080050033 CR3=000000008c723000 CR4=00000000001426e0 [ 3215.417283][T17307] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3215.438542][T17307] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3215.452186][T17307] *** Control State *** [ 3215.461003][T17307] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:36:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x100) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8000000000000000]}) [ 3215.506080][T17307] EntryControls=0000d1ff ExitControls=002fefff [ 3215.529636][T17307] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3215.554888][T17307] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3215.594977][T17307] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:36:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [0x0, 0x0, 0xbf00000000000000]}) 22:36:23 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3215.613207][T17307] reason=80000021 qualification=0000000000000000 [ 3215.623612][T17307] IDTVectoring: info=00000000 errcode=00000000 [ 3215.660223][T17307] TSC Offset = 0xfffff943cf715cb7 [ 3215.704102][T17307] EPT pointer = 0x000000005a79901e 22:36:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0xbf]}) 22:36:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}]}}) 22:36:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffffffe1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000140)={0x5515, 0x4, 0x7f, 0x1, "816c4e39b345b456df9d2aac954067bbda187fb054d98c29bfb7bb6ef9b7301e"}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r4, &(0x7f0000000200)=@encrypted_load={'load ', 'default', 0x20, 'user:', '', 0x20, 0x1, 0x20, [0x61, 0x7f, 0x77]}, 0x2c, 0xfffffffffffffffc) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r2, r1) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 22:36:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100), 0x4) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x4af, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0xbf00]}) [ 3215.984978][T17359] *** Guest State *** [ 3215.992092][T17357] *** Guest State *** [ 3215.997577][T17359] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3216.013399][T17357] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3216.023937][T17359] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3216.034785][T17357] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3216.046494][T17359] CR3 = 0x0000000000000000 [ 3216.061410][T17357] CR3 = 0x0000000000000000 [ 3216.068447][T17359] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3216.078964][T17357] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3216.092366][T17359] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3216.100337][T17357] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3216.104963][T17359] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3216.123594][T17359] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3216.128239][T17357] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3216.137705][T17357] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3216.140718][T17359] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3216.144657][T17357] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3216.159636][T17357] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.173774][T17359] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.195183][T17357] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.198405][T17359] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.220897][T17359] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.228132][T17357] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0xfdfdffff]}]}}) 22:36:24 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x84', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0xbf000000]}) [ 3216.233517][T17359] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.240469][T17357] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.268936][T17357] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.300165][T17359] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.335702][T17357] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x8000000000000000]}) [ 3216.342037][T17359] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.354457][T17359] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3216.365739][T17357] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3216.374915][T17359] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.395005][T17359] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3216.415006][T17357] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.424446][T17357] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3216.434183][T17357] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.434198][T17357] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:36:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0xbf00000000000000]}) [ 3216.445700][T17359] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3216.452450][T17357] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3216.468808][T17357] Interruptibility = 00000000 ActivityState = 00000000 [ 3216.476177][T17359] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3216.498748][T17357] *** Host State *** [ 3216.508745][T17359] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3216.512411][T17357] RIP = 0xffffffff811b4980 RSP = 0xffff8880373f78e0 22:36:24 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x85', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3216.541854][T17359] Interruptibility = 00000000 ActivityState = 00000000 [ 3216.541961][T17357] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3216.550384][T17359] *** Host State *** [ 3216.561418][T17359] RIP = 0xffffffff811b4980 RSP = 0xffff88806336f8e0 [ 3216.568599][T17357] FSBase=00007f6a5c606700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3216.580157][T17359] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3216.587697][T17357] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3216.595011][T17359] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3216.605270][T17357] CR0=0000000080050033 CR3=000000005b910000 CR4=00000000001426e0 [ 3216.613378][T17359] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3216.620569][T17359] CR0=0000000080050033 CR3=0000000054026000 CR4=00000000001426e0 [ 3216.633666][T17357] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 22:36:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0xbf]}) [ 3216.647433][T17359] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3216.655182][T17357] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3216.662458][T17359] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3216.665997][T17357] *** Control State *** [ 3216.680424][T17357] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3216.689142][T17359] *** Control State *** [ 3216.691988][T17357] EntryControls=0000d1ff ExitControls=002fefff [ 3216.699852][T17359] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:36:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0xbf00]}) [ 3216.743205][T17357] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3216.767086][T17359] EntryControls=0000d1ff ExitControls=002fefff [ 3216.776080][T17357] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3216.783744][T17359] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0xffff8000]}]}}) [ 3216.822008][T17357] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3216.847990][T17357] reason=80000021 qualification=0000000000000000 [ 3216.868093][T17359] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3216.873564][T17357] IDTVectoring: info=00000000 errcode=00000000 [ 3216.882842][T17359] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3216.905228][T17357] TSC Offset = 0xfffff9433d89caab [ 3216.910640][T17359] reason=80000021 qualification=0000000000000000 22:36:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffffffe1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000140)={0x5515, 0x4, 0x7f, 0x1, "816c4e39b345b456df9d2aac954067bbda187fb054d98c29bfb7bb6ef9b7301e"}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r4, &(0x7f0000000200)=@encrypted_load={'load ', 'default', 0x20, 'user:', '', 0x20, 0x1, 0x20, [0x61, 0x7f, 0x77]}, 0x2c, 0xfffffffffffffffc) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r2, r1) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 3216.920972][T17357] EPT pointer = 0x0000000058fff01e [ 3216.931718][T17359] IDTVectoring: info=00000000 errcode=00000000 [ 3216.958039][T17359] TSC Offset = 0xfffff9433da81d22 [ 3216.985698][T17359] EPT pointer = 0x0000000054ed501e 22:36:25 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x86', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x400000) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7fffffff, 0x600000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3217.068395][T17410] *** Guest State *** [ 3217.072711][T17410] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3217.082590][T17410] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3217.100577][T17410] CR3 = 0x0000000000000000 [ 3217.114902][T17410] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3217.134845][T17410] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3217.143547][T17410] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3217.165304][T17410] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3217.172531][T17410] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3217.180481][T17410] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.189604][T17410] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.203452][T17410] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0xbf000000]}) 22:36:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0xffff8000]}]}}) [ 3217.230553][T17410] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.272029][T17410] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.309410][T17410] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x8000000000000000]}) 22:36:25 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x87', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x133000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x130) pipe(&(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000140)={0x9, 0x1, 0xfff, 0x8, 'syz0\x00', 0xff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f00000000c0)=0x9) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3217.332677][T17410] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3217.397065][T17410] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.445097][T17410] IDTR: limit=0x00000000, base=0x0000000000000000 22:36:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0xbf00000000000000]}) [ 3217.485731][T17435] *** Guest State *** [ 3217.490193][T17410] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.499648][T17435] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3217.514604][T17410] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3217.528151][T17410] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3217.544842][T17435] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3217.565593][T17410] Interruptibility = 00000000 ActivityState = 00000000 [ 3217.574690][T17435] CR3 = 0x0000000000000000 [ 3217.579692][T17410] *** Host State *** 22:36:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0xfffffdfd]}]}}) 22:36:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xbf]}) [ 3217.604266][T17410] RIP = 0xffffffff811b4980 RSP = 0xffff88803d65f8e0 [ 3217.605871][T17435] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3217.625365][T17410] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3217.642101][T17435] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3217.667031][T17435] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3217.737680][T17435] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3217.744504][T17410] FSBase=00007f6a5c606700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3217.762307][T17435] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}]}}) [ 3217.796798][T17435] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.805751][T17410] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3217.820888][T17435] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.833337][T17435] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.842654][T17435] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.851789][T17410] CR0=0000000080050033 CR3=00000000a8368000 CR4=00000000001426f0 [ 3217.860478][T17435] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.872769][T17435] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.882095][T17410] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3217.903181][T17435] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3217.913561][T17435] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3217.922319][T17410] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3217.922326][T17410] *** Control State *** [ 3217.922344][T17410] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3217.922352][T17410] EntryControls=0000d1ff ExitControls=002fefff [ 3217.922365][T17410] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3217.922374][T17410] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3217.922383][T17410] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3217.922391][T17410] reason=80000021 qualification=0000000000000000 [ 3217.922398][T17410] IDTVectoring: info=00000000 errcode=00000000 [ 3217.922404][T17410] TSC Offset = 0xfffff942a8ee93b5 [ 3217.922413][T17410] EPT pointer = 0x0000000089f0d01e [ 3217.930917][T17435] IDTR: limit=0x00000000, base=0x0000000000000000 22:36:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x4000]}]}}) 22:36:26 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x87', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xbf00]}) [ 3217.942110][T17435] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.011157][T17435] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:36:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xbf000000]}) [ 3218.073874][T17435] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3218.086285][T17435] Interruptibility = 00000000 ActivityState = 00000000 [ 3218.096319][T17435] *** Host State *** [ 3218.106366][T17435] RIP = 0xffffffff811b4980 RSP = 0xffff88805fcbf8e0 [ 3218.134415][T17435] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3218.159991][T17435] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3218.169352][T17435] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3218.176086][T17435] CR0=0000000080050033 CR3=000000009b82f000 CR4=00000000001426f0 22:36:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x8000000000000000]}) 22:36:26 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x88', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3218.184473][T17435] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3218.216780][T17435] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3218.247786][T17435] *** Control State *** 22:36:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf00}, {0xe}}) [ 3218.280450][T17435] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3218.307974][T17473] *** Guest State *** [ 3218.331725][T17435] EntryControls=0000d1ff ExitControls=002fefff [ 3218.374956][T17435] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3218.386220][T17473] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3218.395969][T17435] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3218.406198][T17435] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3218.415316][T17473] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3218.421693][T17435] reason=80000021 qualification=0000000000000000 [ 3218.442735][T17473] CR3 = 0x0000000000000000 [ 3218.443790][T17435] IDTVectoring: info=00000000 errcode=00000000 [ 3218.455089][T17435] TSC Offset = 0xfffff9426fdb18ef [ 3218.466133][T17435] EPT pointer = 0x0000000053e2a01e [ 3218.478675][T17473] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3218.486020][T17473] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3218.497133][T17473] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3218.504089][T17473] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3218.518475][T17473] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3218.526508][T17473] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.542312][T17473] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.551346][T17473] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.578157][T17473] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.587201][T17473] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.603541][T17473] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.612772][T17473] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3218.622495][T17473] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.631842][T17473] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3218.640670][T17473] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3218.649432][T17473] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3218.656551][T17473] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3218.664836][T17473] Interruptibility = 00000000 ActivityState = 00000000 [ 3218.671925][T17473] *** Host State *** [ 3218.675847][T17473] RIP = 0xffffffff811b4980 RSP = 0xffff88803703f8e0 [ 3218.682962][T17473] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3218.690423][T17473] FSBase=00007f696e29e700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3218.699676][T17473] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3218.717087][T17473] CR0=0000000080050033 CR3=000000009b82f000 CR4=00000000001426e0 [ 3218.725037][T17473] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3218.733970][T17473] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3218.741225][T17473] *** Control State *** [ 3218.745546][T17473] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3218.758996][T17473] EntryControls=0000d1ff ExitControls=002fefff [ 3218.765335][T17473] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x1, 0x7ff, 0x8, 0x3c, 0x6, 0x1, 0x1f, 0x100000000, 0x9}}, 0x43) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x800000000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf00}, {0xe}}) 22:36:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xbf00000000000000]}) 22:36:27 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x89', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x80ffff00000000]}]}}) 22:36:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x80ffff00000000]}]}}) [ 3218.774791][T17473] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3218.782646][T17473] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3218.790377][T17473] reason=80000021 qualification=0000000000000000 [ 3218.797987][T17473] IDTVectoring: info=00000000 errcode=00000000 [ 3218.804350][T17473] TSC Offset = 0xfffff94200176bc9 [ 3218.809785][T17473] EPT pointer = 0x0000000062a8f01e 22:36:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xbf]}) 22:36:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xbf00}, {0xe}}) 22:36:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xbf00]}) 22:36:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10080, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2df, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:36:27 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x8a', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_crypto(0x10, 0x3, 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x620000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8b3b, 0x6, 0x8, 0x2}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xbf000000]}) 22:36:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3219.270582][T17526] *** Guest State *** [ 3219.288738][T17526] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3219.301906][T17526] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3219.312634][T17526] CR3 = 0x0000000000000000 [ 3219.326215][T17526] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3219.351209][T17526] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:27 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x8b', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3219.389518][T17526] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3219.411177][T17526] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3219.428535][T17526] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3219.436167][T17526] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.456888][T17526] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.473536][T17526] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.494321][T17526] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.503630][T17526] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.512848][T17526] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.521800][T17526] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3219.530562][T17526] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.530575][T17526] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3219.530593][T17526] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.530603][T17526] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3219.530615][T17526] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3219.530624][T17526] Interruptibility = 00000000 ActivityState = 00000000 [ 3219.530628][T17526] *** Host State *** [ 3219.530640][T17526] RIP = 0xffffffff811b4980 RSP = 0xffff888062fc78e0 [ 3219.530662][T17526] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3219.530674][T17526] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3219.530686][T17526] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3219.530700][T17526] CR0=0000000080050033 CR3=000000008ef1a000 CR4=00000000001426f0 [ 3219.530715][T17526] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3219.530727][T17526] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3219.530732][T17526] *** Control State *** [ 3219.530742][T17526] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3219.530750][T17526] EntryControls=0000d1ff ExitControls=002fefff [ 3219.530764][T17526] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3219.530780][T17526] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3219.556994][T17526] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3219.557005][T17526] reason=80000021 qualification=0000000000000000 [ 3219.557013][T17526] IDTVectoring: info=00000000 errcode=00000000 [ 3219.557021][T17526] TSC Offset = 0xfffff9417bc6349a [ 3219.557031][T17526] EPT pointer = 0x0000000098b4f01e [ 3219.736092][T17544] *** Guest State *** [ 3219.772287][T17544] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3219.797986][T17544] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3219.815214][T17544] CR3 = 0x0000000000000000 22:36:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x100000000000000]}]}}) 22:36:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x100000000000000]}]}}) [ 3219.826126][T17544] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3219.836132][T17544] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3219.843853][T17544] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3219.851532][T17544] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x8c', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3219.889866][T17544] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3219.911196][T17544] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.929010][T17544] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.939936][T17544] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3219.968921][T17544] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 3219.989282][T17544] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.000485][T17544] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.011230][T17544] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3220.073431][T17544] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.133710][T17544] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3220.157434][T17544] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.232906][T17544] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3220.259338][T17544] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3220.280725][T17544] Interruptibility = 00000000 ActivityState = 00000000 [ 3220.302544][T17544] *** Host State *** [ 3220.306477][T17544] RIP = 0xffffffff811b4980 RSP = 0xffff88805e09f8e0 [ 3220.313326][T17544] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3220.320793][T17544] FSBase=00007f696e2bf700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3220.329387][T17544] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3220.335983][T17544] CR0=0000000080050033 CR3=000000008ef1a000 CR4=00000000001426f0 [ 3220.344063][T17544] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3220.351544][T17544] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3220.358377][T17544] *** Control State *** [ 3220.362529][T17544] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3220.369934][T17544] EntryControls=0000d1ff ExitControls=002fefff [ 3220.376173][T17544] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x1, 0x0, 0x6ee) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 22:36:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x200000000000000]}]}}) 22:36:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x200000000000000]}]}}) 22:36:28 executing program 2: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x8d', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3220.383855][T17544] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3220.391263][T17544] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3220.399236][T17544] reason=80000021 qualification=0000000000000000 [ 3220.406251][T17544] IDTVectoring: info=00000000 errcode=00000000 [ 3220.412443][T17544] TSC Offset = 0xfffff941391489af [ 3220.417610][T17544] EPT pointer = 0x00000000a0bea01e 22:36:28 executing program 2: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3220.559675][T17589] *** Guest State *** [ 3220.563916][T17589] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3220.574970][T17589] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x8e', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:28 executing program 2: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) [ 3220.645823][T17589] CR3 = 0x0000000000000000 [ 3220.656838][T17589] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3220.680157][T17589] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3220.702341][T17589] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3220.736517][T17589] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:29 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) [ 3220.776784][T17589] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3220.797196][T17589] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.841694][T17589] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.853868][T17589] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.883720][T17589] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.911567][T17589] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.924731][T17589] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.934889][T17589] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3220.944357][T17589] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.954828][T17589] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3220.964258][T17589] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3220.973592][T17589] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3220.981381][T17589] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3220.990117][T17589] Interruptibility = 00000000 ActivityState = 00000000 [ 3220.997604][T17589] *** Host State *** [ 3221.001733][T17589] RIP = 0xffffffff811b4980 RSP = 0xffff88805a6378e0 [ 3221.011219][T17589] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3221.018945][T17589] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3221.027998][T17589] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3221.034818][T17589] CR0=0000000080050033 CR3=000000008f3b0000 CR4=00000000001426e0 [ 3221.043136][T17589] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3221.050934][T17589] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3221.058079][T17589] *** Control State *** [ 3221.062255][T17589] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3221.070063][T17589] EntryControls=0000d1ff ExitControls=002fefff [ 3221.076412][T17589] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3221.084161][T17589] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3221.092524][T17589] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3221.101358][T17589] reason=80000021 qualification=0000000000000000 [ 3221.108445][T17589] IDTVectoring: info=00000000 errcode=00000000 [ 3221.114601][T17589] TSC Offset = 0xfffff940ca386cab [ 3221.119759][T17589] EPT pointer = 0x0000000090de901e 22:36:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'eql\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000016c0)={0x0, @empty, @local}, &(0x7f0000001700)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001740)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000001780)={0x14c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x130, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0xc004) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 22:36:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x3f00000000000000]}]}}) 22:36:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:29 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:29 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x8f', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:29 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x6000, 0x7fff, 0x0, 0x81, 0x0, [{0x2, 0x8000, 0xffff, [], 0xe15}, {0x101, 0x2, 0x6, [], 0x3ff}, {0x93, 0x9, 0xfffffffffffff350, [], 0x1}, {0x81, 0x3f, 0x6, [], 0x100}, {0x647b09e4, 0x3, 0x1, [], 0x6}, {0x9, 0x1, 0x73f, [], 0x1}, {0x200, 0x8, 0x951}, {0x9, 0xffffffff, 0xcf, [], 0x10000}, {0x1000, 0x5, 0x7, [], 0x8}, {0x6, 0x6, 0x9e, [], 0x390f}, {0x8, 0x55c, 0x8, [], 0x21}, {0x5, 0x3, 0x1}, {0x7e, 0x8, 0x3, [], 0x100}, {0x0, 0x2, 0x1, [], 0x80000001}, {0x1, 0x0, 0x3f, [], 0x6}, {0xea9, 0xff, 0x6, [], 0x8}, {0x1, 0x8, 0x8, [], 0x2}, {0x200, 0x84, 0x1, [], 0x6fc}, {0x200, 0x0, 0x0, [], 0x746c}, {0xffffffff, 0x1, 0x10000, [], 0x3}, {0x2, 0x4, 0xff0, [], 0xfffffffffffffffd}, {0x0, 0x6, 0x3bc7, [], 0xd7}, {0x1, 0x6, 0x800, [], 0x6}, {0x4, 0x4, 0xba, [], 0x100}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 22:36:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x3f00000000000000]}]}}) 22:36:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:29 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r3) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:29 executing program 2: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:29 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x90', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3221.593931][T17649] *** Guest State *** [ 3221.612051][T17649] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3221.642397][T17649] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3221.692058][T17649] CR3 = 0x0000000000000000 [ 3221.723924][T17649] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3221.735691][T17649] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3221.749638][T17649] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3221.757507][T17649] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3221.764518][T17649] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3221.778946][T17649] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.790924][T17649] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.806463][T17649] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.815445][T17649] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.826102][T17649] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.835298][T17649] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.844566][T17649] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3221.853460][T17649] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.862999][T17649] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3221.871877][T17649] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3221.880875][T17649] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3221.888381][T17649] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3221.896719][T17649] Interruptibility = 00000000 ActivityState = 00000000 [ 3221.896734][T17649] *** Host State *** [ 3221.907788][T17649] RIP = 0xffffffff811b4980 RSP = 0xffff888063ae78e0 [ 3221.914584][T17649] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3221.921851][T17649] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3221.921863][T17649] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3221.921878][T17649] CR0=0000000080050033 CR3=00000000a4fa7000 CR4=00000000001426f0 [ 3221.921892][T17649] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3221.921903][T17649] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3221.921908][T17649] *** Control State *** [ 3221.921918][T17649] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3221.921933][T17649] EntryControls=0000d1ff ExitControls=002fefff [ 3221.945127][T17649] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3221.965877][T17649] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3221.983544][T17649] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3221.992455][T17649] reason=80000021 qualification=0000000000000000 [ 3222.014248][T17649] IDTVectoring: info=00000000 errcode=00000000 [ 3222.020671][T17649] TSC Offset = 0xfffff9403e377c9d [ 3222.025960][T17649] EPT pointer = 0x00000000a48f601e 22:36:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x4000000000000000]}]}}) 22:36:30 executing program 2: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:30 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x91', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$tipc(0x1e, 0x64c99050d610eb4c, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:36:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x4000000000000000]}]}}) 22:36:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:30 executing program 2: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) [ 3222.360120][T17673] *** Guest State *** [ 3222.367401][T17673] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3222.381937][T17673] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3222.411499][T17673] CR3 = 0x0000000000000000 22:36:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3222.445279][T17673] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3222.475629][T17673] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, 0x0) [ 3222.501769][T17673] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3222.521126][T17673] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3222.537023][T17673] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:30 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x92', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, 0x0) [ 3222.549273][T17673] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.587304][T17673] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.624664][T17673] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.652771][T17673] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.667449][T17673] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.676777][T17673] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.698686][T17673] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3222.714654][T17673] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.727690][T17673] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3222.739033][T17673] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3222.753480][T17673] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3222.764992][T17673] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3222.774605][T17673] Interruptibility = 00000000 ActivityState = 00000000 [ 3222.783569][T17673] *** Host State *** [ 3222.788170][T17673] RIP = 0xffffffff811b4980 RSP = 0xffff88803d65f8e0 [ 3222.794916][T17673] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3222.802240][T17673] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3222.824202][T17673] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3222.830991][T17673] CR0=0000000080050033 CR3=0000000054068000 CR4=00000000001426f0 [ 3222.840013][T17673] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3222.847565][T17673] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3222.854334][T17673] *** Control State *** [ 3222.863547][T17673] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3222.871925][T17673] EntryControls=0000d1ff ExitControls=002fefff [ 3222.882494][T17673] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3222.890214][T17673] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3222.897727][T17673] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3222.905039][T17673] reason=80000021 qualification=0000000000000000 [ 3222.912151][T17673] IDTVectoring: info=00000000 errcode=00000000 [ 3222.918424][T17673] TSC Offset = 0xfffff93fd438e373 [ 3222.923456][T17673] EPT pointer = 0x00000000a3a0d01e 22:36:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, 0x0) 22:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:31 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x93', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}]}}) 22:36:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0xfdfdffff00000000]}]}}) 22:36:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)) 22:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x10000000}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:31 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x94', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)) 22:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3223.434448][T17742] *** Guest State *** [ 3223.445626][T17742] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3223.493272][T17742] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)) 22:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3223.533660][T17742] CR3 = 0x0000000000000000 [ 3223.543216][T17742] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3223.555298][T17742] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3223.598771][T17742] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3223.621923][T17742] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f0000000040)={0x7, 0x1000}) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x100000000a, 0x1, 0x0) syz_execute_func(&(0x7f0000000180)="c462653dce0fbdc52ecd8080000cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ff0070e4c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") [ 3223.644886][T17742] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3223.675260][T17742] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.709925][T17742] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.740714][T17742] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.758299][T17742] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.768555][T17742] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.793325][T17742] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.805826][T17742] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3223.821927][T17742] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.836123][T17742] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3223.847914][T17742] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3223.857414][T17742] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 3223.864724][T17742] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3223.873627][T17742] Interruptibility = 00000000 ActivityState = 00000000 [ 3223.882422][T17742] *** Host State *** [ 3223.886489][T17742] RIP = 0xffffffff811b4980 RSP = 0xffff88803bccf8e0 [ 3223.893356][T17742] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3223.900639][T17742] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3223.909294][T17742] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3223.915963][T17742] CR0=0000000080050033 CR3=000000009330a000 CR4=00000000001426e0 [ 3223.924517][T17742] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3223.932571][T17742] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3223.939415][T17742] *** Control State *** [ 3223.943578][T17742] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3223.951036][T17742] EntryControls=0000d1ff ExitControls=002fefff [ 3223.957267][T17742] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3223.964915][T17742] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3223.972373][T17742] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3223.979732][T17742] reason=80000021 qualification=0000000000000000 [ 3223.986850][T17742] IDTVectoring: info=00000000 errcode=00000000 [ 3223.993011][T17742] TSC Offset = 0xfffff93f40b16f41 [ 3223.998119][T17742] EPT pointer = 0x000000009ace401e 22:36:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0xffffffff00000000]}]}}) 22:36:32 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x95', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:32 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x2]}]}}) 22:36:32 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000480)={0x10000000}) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x7fffffff, 0x10000}, {0xfffffffffffffffd}]}, 0x14, 0x18ba686fb6dc2070) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000680)={'veth1_to_bond\x00', &(0x7f0000000600)=@ethtool_eeprom={0xf, 0x4, 0xffff, 0x65, "460bbec1724d01d5e53a3f0fa4b2429c82eff20ba6bc8c32ed2ac0f670a6df05a7069f50ed0d2dce3e6a78efe25e506479abb00a1e2943e9a0e474607001a819dad5edc04f0a10bdc9dd075afabf2dba8f458a1ad4b59b708d7b3b5040ab7984a0394874a7"}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x1f, 0x5c57, 0x7, 0x5}, {0x0, 0xdc67, 0x1, 0x1}, {0x2, 0x7c, 0xdff, 0x7fff}, {0x1, 0x0, 0xfffffffffffffffe, 0x5}, {0x8, 0x3, 0x9ee, 0x5}, {0x6, 0xb50, 0x1, 0x2}]}, 0x10) sendto$isdn(r3, &(0x7f00000004c0)={0x10001, 0x1, "7f1eb8a8b3bb3bf3bf128bf92dc4"}, 0x16, 0x48080, &(0x7f0000000500)={0x22, 0x2149ce58, 0x7ff, 0x3, 0x2}, 0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x5000, 0x1000, &(0x7f0000044000/0x1000)=nil}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000540)={0x0, 0xf76, 0x4, [0x65, 0x760c, 0x7f, 0x1ff]}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000005c0)={r4, 0x9, 0x2, 0x400}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', r0}, 0x10) [ 3224.191929][T17783] FAULT_INJECTION: forcing a failure. [ 3224.191929][T17783] name failslab, interval 1, probability 0, space 0, times 0 [ 3224.210818][T17787] Unknown ioctl 1074025828 [ 3224.216803][T17783] CPU: 1 PID: 17783 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #95 [ 3224.224803][T17783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3224.224838][T17783] Call Trace: [ 3224.224870][T17783] dump_stack+0x172/0x1f0 22:36:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3224.224898][T17783] should_fail.cold+0xa/0x15 [ 3224.247230][T17783] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3224.253056][T17783] ? ___might_sleep+0x163/0x280 [ 3224.257945][T17783] __should_failslab+0x121/0x190 [ 3224.262893][T17783] should_failslab+0x9/0x14 [ 3224.268095][T17783] kmem_cache_alloc_trace+0x2d1/0x760 [ 3224.268113][T17783] ? lock_downgrade+0x880/0x880 [ 3224.268206][T17783] snd_seq_port_connect+0x60/0x510 [ 3224.268228][T17783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3224.268254][T17783] snd_seq_ioctl_subscribe_port+0x1e5/0x310 [ 3224.278477][T17783] snd_seq_ioctl+0x224/0x3e0 [ 3224.289807][T17783] ? snd_seq_open+0x5b0/0x5b0 [ 3224.304949][T17783] ? __fget+0x35a/0x550 [ 3224.304975][T17783] ? snd_seq_open+0x5b0/0x5b0 [ 3224.304995][T17783] do_vfs_ioctl+0xd6e/0x1390 [ 3224.305020][T17783] ? ioctl_preallocate+0x210/0x210 [ 3224.323514][T17783] ? __fget+0x381/0x550 [ 3224.327677][T17783] ? ksys_dup3+0x3e0/0x3e0 [ 3224.327704][T17783] ? tomoyo_file_ioctl+0x23/0x30 22:36:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3224.327720][T17783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3224.327740][T17783] ? security_file_ioctl+0x93/0xc0 [ 3224.327760][T17783] ksys_ioctl+0xab/0xd0 [ 3224.352583][T17783] __x64_sys_ioctl+0x73/0xb0 [ 3224.352607][T17783] do_syscall_64+0x103/0x610 [ 3224.352630][T17783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3224.352642][T17783] RIP: 0033:0x458da9 [ 3224.352659][T17783] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3224.352667][T17783] RSP: 002b:00007f6a5c605c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3224.392788][T17783] RAX: ffffffffffffffda RBX: 00007f6a5c605c90 RCX: 0000000000458da9 [ 3224.392798][T17783] RDX: 0000000020000000 RSI: 0000000040505330 RDI: 0000000000000003 [ 3224.392806][T17783] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3224.392815][T17783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a5c6066d4 [ 3224.392824][T17783] R13: 00000000004cc598 R14: 00000000004d5ee8 R15: 0000000000000004 22:36:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3224.503590][T17787] Unknown ioctl 44672 [ 3224.508720][T17787] Unknown ioctl -2147202749 22:36:32 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) 22:36:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x3f00]}]}}) 22:36:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}]}}) 22:36:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:32 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x96', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}}) [ 3224.822000][T17816] *** Guest State *** [ 3224.832403][T17816] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 3224.856553][T17816] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3224.883474][T17816] CR3 = 0x0000000000000000 [ 3224.903660][T17816] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:36:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x2, &(0x7f0000000000)={{}, {0xe}}) [ 3224.912908][T17816] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3224.925928][T17816] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3224.935136][T17816] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3224.943006][T17816] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3224.951760][T17816] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:33 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x97', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3224.991456][T17816] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.022243][T17816] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.061940][T17816] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.093247][T17816] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.103354][T17816] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5421, &(0x7f0000000000)={{}, {0xe}}) 22:36:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3225.112947][T17816] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3225.142379][T17816] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.160481][T17816] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3225.200570][T17816] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.227957][T17816] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3225.239507][T17816] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3225.254827][T17816] Interruptibility = 00000000 ActivityState = 00000000 [ 3225.286482][T17816] *** Host State *** [ 3225.292317][T17816] RIP = 0xffffffff811b4980 RSP = 0xffff88805e09f8e0 [ 3225.304424][T17816] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3225.325792][T17816] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3225.334743][T17816] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3225.341521][T17816] CR0=0000000080050033 CR3=000000009147b000 CR4=00000000001426f0 [ 3225.349837][T17816] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3225.357296][T17816] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3225.364084][T17816] *** Control State *** [ 3225.368406][T17816] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3225.375787][T17816] EntryControls=0000d1ff ExitControls=002fefff [ 3225.382183][T17816] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3225.389969][T17816] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3225.397456][T17816] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3225.404728][T17816] reason=80000021 qualification=0000000000000000 [ 3225.411801][T17816] IDTVectoring: info=00000000 errcode=00000000 [ 3225.418025][T17816] TSC Offset = 0xfffff93e8347e74a [ 3225.423056][T17816] EPT pointer = 0x00000000542b701e 22:36:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x4000]}]}}) 22:36:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5450, &(0x7f0000000000)={{}, {0xe}}) 22:36:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x3f00]}]}}) 22:36:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:33 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x98', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000045000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6f73322ec1ed43b10c401d162f1f86a878bd36ca7e7bf547709d0a4306c39d329beaf0bac8fe8bc72ee55fe7ce35d9"]) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000000)={0x9, 0x80, 0x398b}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80140908}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x824, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 22:36:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5451, &(0x7f0000000000)={{}, {0xe}}) 22:36:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5452, &(0x7f0000000000)={{}, {0xe}}) [ 3225.763735][T17873] *** Guest State *** [ 3225.782722][T17873] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 3225.813299][T17873] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:34 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x99', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3225.855807][T17873] CR3 = 0x0000000000000000 [ 3225.868100][T17873] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3225.882032][T17873] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3225.897038][T17873] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 22:36:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x5460, &(0x7f0000000000)={{}, {0xe}}) [ 3225.919834][T17873] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3225.945815][T17873] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3225.979277][T17873] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3225.994865][T17873] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.009171][T17873] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.019649][T17873] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.029019][T17873] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.038171][T17873] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.047520][T17873] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3226.061498][T17873] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.072623][T17873] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3226.088155][T17873] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.104449][T17873] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3226.114636][T17873] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3226.124133][T17873] Interruptibility = 00000000 ActivityState = 00000000 [ 3226.131451][T17873] *** Host State *** [ 3226.135466][T17873] RIP = 0xffffffff811b4980 RSP = 0xffff888058c9f8e0 [ 3226.155495][T17873] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3226.168293][T17873] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3226.177977][T17873] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3226.184588][T17873] CR0=0000000080050033 CR3=00000000a3dd7000 CR4=00000000001426f0 [ 3226.192558][T17873] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3226.200097][T17873] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3226.210305][T17873] *** Control State *** [ 3226.214477][T17873] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3226.224104][T17873] EntryControls=0000d1ff ExitControls=002fefff [ 3226.230349][T17873] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3226.238085][T17873] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3226.245453][T17873] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3226.252786][T17873] reason=80000021 qualification=0000000000000000 [ 3226.259899][T17873] IDTVectoring: info=00000000 errcode=00000000 [ 3226.266863][T17873] TSC Offset = 0xfffff93e029017e1 [ 3226.271898][T17873] EPT pointer = 0x000000008c83001e 22:36:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x80ffff]}]}}) 22:36:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:34 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x9a', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40049409, &(0x7f0000000000)={{}, {0xe}}) 22:36:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x200400, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3ff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x12040, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x200000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000001c0)={0x101, 0xf3}) 22:36:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x4000]}]}}) 22:36:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x4020940d, &(0x7f0000000000)={{}, {0xe}}) [ 3226.653611][T17917] *** Guest State *** [ 3226.669509][T17917] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3226.704545][T17917] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3226.743505][T17917] CR3 = 0x0000000000000000 22:36:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3226.758579][T17917] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3226.766486][T17917] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3226.792991][T17917] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 22:36:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x404c534a, &(0x7f0000000000)={{}, {0xe}}) [ 3226.807258][T17917] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3226.816174][T17917] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3226.829515][T17917] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.846541][T17917] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:35 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x9b', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3226.862181][T17917] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.871541][T17917] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.896285][T17917] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.936032][T17917] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3226.961598][T17917] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3226.979093][T17917] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.005918][T17917] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3227.023329][T17917] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.033134][T17917] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3227.040949][T17917] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3227.049476][T17917] Interruptibility = 00000000 ActivityState = 00000000 [ 3227.056446][T17917] *** Host State *** [ 3227.060852][T17917] RIP = 0xffffffff811b4980 RSP = 0xffff88805a6378e0 [ 3227.067607][T17917] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3227.067621][T17917] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3227.084581][T17917] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3227.091313][T17917] CR0=0000000080050033 CR3=00000000646e4000 CR4=00000000001426f0 [ 3227.102721][T17917] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3227.113970][T17917] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3227.121542][T17917] *** Control State *** [ 3227.125826][T17917] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3227.133653][T17917] EntryControls=0000d1ff ExitControls=002fefff [ 3227.140205][T17917] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3227.148245][T17917] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3227.148259][T17917] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3227.163353][T17917] reason=80000021 qualification=0000000000000000 [ 3227.170550][T17917] IDTVectoring: info=00000000 errcode=00000000 [ 3227.177245][T17917] TSC Offset = 0xfffff93d8844a8e9 [ 3227.182415][T17917] EPT pointer = 0x000000008a24401e 22:36:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x1000000]}]}}) 22:36:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x4058534c, &(0x7f0000000000)={{}, {0xe}}) 22:36:35 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x9c', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x4000) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f00000000c0)) [ 3227.409110][T17953] *** Guest State *** [ 3227.424977][T17953] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3227.441883][T17953] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff]}]}}) 22:36:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{}, {0xe}}) 22:36:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3227.496981][T17953] CR3 = 0x0000000000000000 [ 3227.513468][T17953] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:36:35 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x9d', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40a85323, &(0x7f0000000000)={{}, {0xe}}) [ 3227.596729][T17953] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3227.658329][T17953] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3227.680146][T17953] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3227.715068][T17953] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3227.734839][T17953] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.764554][T17953] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.797384][T17953] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.809192][T17953] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.819557][T17953] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.850041][T17953] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.861842][T17953] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3227.872195][T17953] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.883903][T17953] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3227.892993][T17953] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3227.902218][T17953] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3227.914243][T17953] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3227.923911][T17953] Interruptibility = 00000000 ActivityState = 00000000 [ 3227.931108][T17953] *** Host State *** [ 3227.935175][T17953] RIP = 0xffffffff811b4980 RSP = 0xffff88805007f8e0 [ 3227.942193][T17953] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3227.950524][T17953] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3227.959246][T17953] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3227.965964][T17953] CR0=0000000080050033 CR3=000000006390c000 CR4=00000000001426f0 [ 3227.974215][T17953] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3227.981849][T17953] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3227.988818][T17953] *** Control State *** [ 3227.993026][T17953] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3228.000532][T17953] EntryControls=0000d1ff ExitControls=002fefff [ 3228.006981][T17953] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3228.014744][T17953] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3228.022375][T17953] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3228.029877][T17953] reason=80000021 qualification=0000000000000000 [ 3228.037067][T17953] IDTVectoring: info=00000000 errcode=00000000 [ 3228.043323][T17953] TSC Offset = 0xfffff93d1fa58316 [ 3228.048473][T17953] EPT pointer = 0x000000009543401e 22:36:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x2000000]}]}}) 22:36:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40bc5311, &(0x7f0000000000)={{}, {0xe}}) 22:36:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:36 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x9e', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1, 0x440002) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000000c0)="9923c062277ea53bc24814211ab60e99a2f84dc532d0644595510f2420228fbfa541e3d8376b025bae0c566994", 0x2d, 0x0, 0x0, 0x3, r5}, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:36:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}]}}) 22:36:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045300, &(0x7f0000000000)={{}, {0xe}}) 22:36:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) kcmp(r3, r4, 0x0, r1, r2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:36 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\x9f', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045301, &(0x7f0000000000)={{}, {0xe}}) 22:36:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x3f000000]}]}}) 22:36:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {0x0, 0xf000}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa000, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) symlinkat(&(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00') ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$bt_bnep(0x1f, 0x3, 0x4) 22:36:37 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa0', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0045878, &(0x7f0000000000)={{}, {0xe}}) 22:36:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3229.139687][T18041] QAT: Invalid ioctl [ 3229.214658][T18041] *** Guest State *** [ 3229.226856][T18041] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3229.237261][T18041] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3229.249459][T18041] CR3 = 0x0000000000000000 [ 3229.254186][T18041] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3229.262646][T18041] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3229.272167][T18041] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3229.280400][T18041] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3229.287511][T18041] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3229.295204][T18041] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3229.304209][T18041] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3229.313244][T18041] SS: sel=0x0001, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3229.322188][T18041] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3229.331112][T18041] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3229.340051][T18041] GS: sel=0x0000, attr=0x10000, limit=0x0000f000, base=0x0000000000000000 [ 3229.372396][T18041] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3229.398653][T18041] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}]}}) 22:36:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0045878, &(0x7f0000000000)={{}, {0xe}}) 22:36:37 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa1', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3229.432776][T18041] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3229.450354][T18041] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0105303, &(0x7f0000000000)={{}, {0xe}}) 22:36:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3229.489734][T18041] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3229.516907][T18041] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 22:36:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0189436, &(0x7f0000000000)={{}, {0xe}}) [ 3229.566882][T18041] Interruptibility = 00000000 ActivityState = 00000000 [ 3229.597330][T18041] *** Host State *** [ 3229.613685][T18041] RIP = 0xffffffff811b4980 RSP = 0xffff88805a6378e0 [ 3229.653198][T18041] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3229.668992][T18041] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3229.684198][T18041] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3229.693872][T18041] CR0=0000000080050033 CR3=000000008c4cd000 CR4=00000000001426f0 [ 3229.715731][T18041] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3229.750342][T18041] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3229.763107][T18041] *** Control State *** [ 3229.768513][T18041] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3229.776044][T18041] EntryControls=0000d1ff ExitControls=002fefff [ 3229.782861][T18041] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3229.791043][T18041] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3229.798596][T18041] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3229.805911][T18041] reason=80000021 qualification=0000000000000000 [ 3229.813017][T18041] IDTVectoring: info=00000000 errcode=00000000 [ 3229.819282][T18041] TSC Offset = 0xfffff93c2954aa30 [ 3229.824307][T18041] EPT pointer = 0x0000000094ea301e [ 3229.850338][T18050] QAT: Invalid ioctl [ 3229.854502][T18050] QAT: Invalid ioctl [ 3229.859610][T18076] QAT: Invalid ioctl 22:36:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x40000000]}]}}) 22:36:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa2', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc020660b, &(0x7f0000000000)={{}, {0xe}}) 22:36:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)={0x29, 0x86, "2e73b43cd8706b8113161af5079ace238f8c222306e68753baa225502b3802a8ca"}, 0x4800) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3230.055917][T18089] *** Guest State *** [ 3230.072202][T18089] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3230.086183][T18089] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3230.111426][T18089] CR3 = 0x0000000000000000 [ 3230.121272][T18089] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3230.128785][T18089] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3230.136234][T18089] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3230.145863][T18089] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3230.153055][T18089] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3230.164321][T18089] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.181119][T18089] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.191153][T18089] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.200711][T18089] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.209881][T18089] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.219653][T18089] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.233557][T18089] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3230.243529][T18089] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.252399][T18089] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3230.261257][T18089] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3230.271544][T18089] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3230.278742][T18089] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3230.296030][T18089] Interruptibility = 00000000 ActivityState = 00000000 22:36:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}]}}) 22:36:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0305302, &(0x7f0000000000)={{}, {0xe}}) 22:36:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa3', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3230.336801][T18089] *** Host State *** [ 3230.341056][T18089] RIP = 0xffffffff811b4980 RSP = 0xffff88805a6378e0 [ 3230.360699][T18089] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3230.372797][T18089] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3230.414052][T18089] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3230.450584][T18089] CR0=0000000080050033 CR3=000000008e3e6000 CR4=00000000001426f0 22:36:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{}, {0xe}}) 22:36:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3230.467037][T18089] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 22:36:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3230.533022][T18089] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3230.561814][T18089] *** Control State *** [ 3230.574036][T18089] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3230.596949][T18089] EntryControls=0000d1ff ExitControls=002fefff [ 3230.611691][T18089] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3230.622593][T18089] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3230.640318][T18089] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3230.658092][T18089] reason=80000021 qualification=0000000000000000 [ 3230.674724][T18089] IDTVectoring: info=00000000 errcode=00000000 [ 3230.681219][T18089] TSC Offset = 0xfffff93bb5c4892e [ 3230.686249][T18089] EPT pointer = 0x000000009896b01e 22:36:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}]}}) 22:36:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000000)={{}, {0xe}}) 22:36:39 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa4', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f0001007d02000000610008002b000000020200000007000000000000000000000803000000050000000100008000000000130062646576232c5b6e6f6465f840767472757374656409002f6465762f6b766d0009002f6465742f6b766d0009002f6465762fb5064ad5e7b31c6b766d0009002f6465762f6b766d00", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x7f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x40000000]}]}}) 22:36:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0bc5310, &(0x7f0000000000)={{}, {0xe}}) 22:36:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x420000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x235}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0xf}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:39 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa5', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x4}, {0xe}}) [ 3231.345698][T18148] *** Guest State *** [ 3231.356465][T18148] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3231.371500][T18148] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3231.389641][T18148] CR3 = 0x0000000000000000 [ 3231.394106][T18148] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3231.394122][T18148] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3231.394132][T18148] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3231.394144][T18148] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3231.394161][T18148] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3231.394183][T18148] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.507532][T18148] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.518380][T18148] SS: sel=0x000f, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.527842][T18148] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.537757][T18148] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.557088][T18148] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.566239][T18148] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3231.579046][T18148] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.588176][T18148] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3231.599675][T18148] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3231.608648][T18148] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3231.615995][T18148] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3231.624746][T18148] Interruptibility = 00000000 ActivityState = 00000000 [ 3231.631960][T18148] *** Host State *** [ 3231.635975][T18148] RIP = 0xffffffff811b4980 RSP = 0xffff888062a278e0 [ 3231.642816][T18148] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3231.650064][T18148] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3231.658626][T18148] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3231.665314][T18148] CR0=0000000080050033 CR3=0000000099eb7000 CR4=00000000001426e0 [ 3231.673138][T18148] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3231.680563][T18148] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3231.687400][T18148] *** Control State *** [ 3231.691555][T18148] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3231.699322][T18148] EntryControls=0000d1ff ExitControls=002fefff [ 3231.705490][T18148] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3231.713335][T18148] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3231.720760][T18148] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3231.728950][T18148] reason=80000021 qualification=0000000000000000 [ 3231.735973][T18148] IDTVectoring: info=00000000 errcode=00000000 [ 3231.743090][T18148] TSC Offset = 0xfffff93b05a3033f [ 3231.748212][T18148] EPT pointer = 0x00000000996fb01e 22:36:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0xffff8000]}]}}) 22:36:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x8}, {0xe}}) 22:36:40 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa6', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x815) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:36:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}]}}) 22:36:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xbf}, {0xe}}) 22:36:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:36:40 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa7', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xbf00}, {0xe}}) 22:36:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3232.222237][T18195] *** Guest State *** [ 3232.242029][T18195] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3232.296225][T18195] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3232.326504][T18195] CR3 = 0x0000000000000000 [ 3232.334823][T18195] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3232.353695][T18195] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3232.373563][T18195] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3232.385372][T18195] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3232.401215][T18195] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3232.417870][T18195] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.427673][T18195] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.441270][T18195] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.453032][T18195] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.465212][T18195] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.475481][T18195] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.488596][T18195] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3232.499525][T18195] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.510505][T18195] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3232.521600][T18195] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3232.533318][T18195] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3232.542767][T18195] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3232.553155][T18195] Interruptibility = 00000000 ActivityState = 00000000 [ 3232.562264][T18195] *** Host State *** [ 3232.566175][T18195] RIP = 0xffffffff811b4980 RSP = 0xffff88806288f8e0 [ 3232.575104][T18195] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3232.584470][T18195] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3232.596201][T18195] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3232.605443][T18195] CR0=0000000080050033 CR3=000000008fb7c000 CR4=00000000001426e0 [ 3232.615419][T18195] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3232.626751][T18195] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3232.633741][T18195] *** Control State *** [ 3232.638285][T18195] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3232.645650][T18195] EntryControls=0000d1ff ExitControls=002fefff [ 3232.652157][T18195] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3232.659982][T18195] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3232.667410][T18195] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3232.674694][T18195] reason=80000021 qualification=0000000000000000 [ 3232.681815][T18195] IDTVectoring: info=00000000 errcode=00000000 [ 3232.681823][T18195] TSC Offset = 0xfffff93a89547c1e [ 3232.681833][T18195] EPT pointer = 0x000000008f3b001e 22:36:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}]}}) 22:36:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x1000000}, {0xe}}) 22:36:41 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa8', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xffff8000]}]}}) 22:36:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x4000000}, {0xe}}) 22:36:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:41 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xa9', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x8000000}, {0xe}}) [ 3233.170387][T18247] *** Guest State *** [ 3233.206039][T18247] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3233.246199][T18247] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3233.262888][T18247] CR3 = 0x0000000000000000 [ 3233.267882][T18247] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3233.275395][T18247] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3233.296106][T18247] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3233.296121][T18247] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3233.309966][T18247] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3233.317430][T18247] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.326733][T18247] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.335428][T18247] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.364483][T18247] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.374598][T18247] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.383906][T18247] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.392952][T18247] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3233.401756][T18247] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.411037][T18247] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3233.419790][T18247] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.419803][T18247] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3233.419815][T18247] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3233.419825][T18247] Interruptibility = 00000000 ActivityState = 00000000 [ 3233.419830][T18247] *** Host State *** [ 3233.419841][T18247] RIP = 0xffffffff811b4980 RSP = 0xffff888045c778e0 [ 3233.419863][T18247] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3233.419875][T18247] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3233.419888][T18247] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3233.419902][T18247] CR0=0000000080050033 CR3=000000008fb7c000 CR4=00000000001426f0 [ 3233.419917][T18247] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3233.419931][T18247] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3233.444066][T18247] *** Control State *** [ 3233.518962][T18247] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3233.527159][T18247] EntryControls=0000d1ff ExitControls=002fefff [ 3233.533331][T18247] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3233.544249][T18247] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3233.551752][T18247] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3233.559188][T18247] reason=80000021 qualification=0000000000000000 [ 3233.566213][T18247] IDTVectoring: info=00000000 errcode=00000000 [ 3233.572513][T18247] TSC Offset = 0xfffff93a0a4db28c [ 3233.577891][T18247] EPT pointer = 0x000000008c58601e 22:36:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x80ffff00000000]}]}}) 22:36:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xbf000000}, {0xe}}) 22:36:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:41 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xaa', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x9) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3233.825775][T18280] *** Guest State *** [ 3233.841212][T18280] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3233.851127][T18280] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3233.865549][T18280] CR3 = 0x0000000000000000 [ 3233.870381][T18280] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3233.877905][T18280] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3233.886136][T18280] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3233.893199][T18280] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3233.900237][T18280] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3233.908504][T18280] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.927536][T18280] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.936445][T18280] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.962504][T18280] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.972162][T18280] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.981284][T18280] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3233.991022][T18280] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3234.000559][T18280] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3234.009342][T18280] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3234.018101][T18280] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}]}}) 22:36:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xfdfdffff}, {0xe}}) 22:36:42 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xab', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3234.026870][T18280] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3234.034256][T18280] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3234.056868][T18280] Interruptibility = 00000000 ActivityState = 00000000 [ 3234.067474][T18280] *** Host State *** [ 3234.083707][T18280] RIP = 0xffffffff811b4980 RSP = 0xffff8880a8c4f8e0 [ 3234.117895][T18280] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:36:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xfffffdfd}, {0xe}}) [ 3234.141774][T18280] FSBase=00007f696e2bf700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3234.168873][T18280] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 22:36:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x100000000000000}, {0xe}}) [ 3234.201965][T18280] CR0=0000000080050033 CR3=000000009fc31000 CR4=00000000001426f0 [ 3234.230371][T18280] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3234.242191][T18280] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3234.252939][T18280] *** Control State *** [ 3234.269371][T18280] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3234.285296][T18280] EntryControls=0000d1ff ExitControls=002fefff [ 3234.305692][T18280] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3234.333244][T18280] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3234.346332][T18280] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3234.366630][T18280] reason=80000021 qualification=0000000000000000 [ 3234.373676][T18280] IDTVectoring: info=00000000 errcode=00000000 [ 3234.386911][T18280] TSC Offset = 0xfffff939b61712f2 [ 3234.392198][T18280] EPT pointer = 0x000000008d5b701e 22:36:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x100000000000000]}]}}) 22:36:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:42 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xac', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x400000000000000}, {0xe}}) 22:36:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x800, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff00000000]}]}}) 22:36:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x800000000000000}, {0xe}}) 22:36:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x100, 0x0) accept4$tipc(r3, 0x0, &(0x7f0000000140), 0x80000) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x8001003, 0x9, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:43 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xad', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3235.006377][T18342] *** Guest State *** 22:36:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x8000000000000000}, {0xe}}) [ 3235.026847][T18342] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3235.053939][T18342] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3235.065361][T18342] CR3 = 0x0000000000000000 [ 3235.070967][T18342] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3235.081282][T18342] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3235.098721][T18342] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3235.107767][T18342] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3235.114907][T18342] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3235.130517][T18342] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.165605][T18342] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.181914][T18342] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.192248][T18342] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.208631][T18342] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.226528][T18342] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.235765][T18342] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3235.244734][T18342] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.255483][T18342] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3235.264699][T18342] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.273691][T18342] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3235.281109][T18342] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3235.289766][T18342] Interruptibility = 00000000 ActivityState = 00000000 [ 3235.296995][T18342] *** Host State *** [ 3235.300920][T18342] RIP = 0xffffffff811b4980 RSP = 0xffff88809611f8e0 [ 3235.307760][T18342] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3235.314883][T18342] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3235.323476][T18342] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3235.330197][T18342] CR0=0000000080050033 CR3=000000008a6aa000 CR4=00000000001426e0 [ 3235.337975][T18342] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3235.345388][T18342] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3235.352282][T18342] *** Control State *** [ 3235.356467][T18342] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3235.363877][T18342] EntryControls=0000d1ff ExitControls=002fefff [ 3235.370528][T18342] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3235.378221][T18342] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3235.385617][T18342] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3235.392974][T18342] reason=80000021 qualification=0000000000000000 [ 3235.400091][T18342] IDTVectoring: info=00000000 errcode=00000000 [ 3235.406239][T18342] TSC Offset = 0xfffff9390e859cae [ 3235.411302][T18342] EPT pointer = 0x00000000a0f0701e [ 3235.446917][T18358] *** Guest State *** [ 3235.451139][T18358] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3235.461091][T18358] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3235.471030][T18358] CR3 = 0x0000000000000000 [ 3235.479269][T18358] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3235.490666][T18358] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3235.498504][T18358] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3235.505317][T18358] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3235.515616][T18358] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3235.523533][T18358] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.532463][T18358] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x200000000000000]}]}}) 22:36:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xbf00000000000000}, {0xe}}) 22:36:43 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xae', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3235.541834][T18358] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.550944][T18358] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.559993][T18358] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3235.608941][T18358] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.636333][T18358] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3235.662187][T18358] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.682217][T18358] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3235.713494][T18358] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3235.730584][T18358] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3235.777314][T18358] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3235.790560][T18381] *** Guest State *** [ 3235.794675][T18358] Interruptibility = 00000000 ActivityState = 00000000 [ 3235.801821][T18381] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3235.826761][T18381] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3235.829252][T18358] *** Host State *** 22:36:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}]}}) 22:36:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0xfdfdffff00000000}, {0xe}}) 22:36:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3235.885254][T18381] CR3 = 0x0000000000000000 [ 3235.921070][T18358] RIP = 0xffffffff811b4980 RSP = 0xffff88803745f8e0 [ 3235.959970][T18381] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3235.986767][T18358] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3236.010502][T18381] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3236.019473][T18358] FSBase=00007f696e2bf700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3236.029537][T18381] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3236.036362][T18381] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3236.043713][T18358] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3236.051183][T18381] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3236.064418][T18358] CR0=0000000080050033 CR3=000000008a6aa000 CR4=00000000001426f0 [ 3236.075242][T18358] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3236.076441][T18381] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.085960][T18358] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3236.099201][T18358] *** Control State *** [ 3236.100318][T18381] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.103500][T18358] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3236.116338][T18381] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.120199][T18358] EntryControls=0000d1ff ExitControls=002fefff [ 3236.135187][T18381] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.135302][T18358] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3236.144152][T18381] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.152068][T18358] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3236.166790][T18381] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.168265][T18358] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3236.183895][T18381] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3236.185887][T18358] reason=80000021 qualification=0000000000000000 [ 3236.193882][T18381] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.200425][T18358] IDTVectoring: info=00000000 errcode=00000000 [ 3236.214980][T18381] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3236.215369][T18358] TSC Offset = 0xfffff9390e859cae [ 3236.223832][T18381] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.229159][T18358] EPT pointer = 0x00000000a0f0701e [ 3236.244684][T18381] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3236.252015][T18381] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3236.260429][T18381] Interruptibility = 00000000 ActivityState = 00000000 [ 3236.268103][T18381] *** Host State *** [ 3236.272001][T18381] RIP = 0xffffffff811b4980 RSP = 0xffff8880462278e0 [ 3236.278769][T18381] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3236.285896][T18381] FSBase=00007f696e29e700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3236.294467][T18381] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3236.301124][T18381] CR0=0000000080050033 CR3=000000008a6aa000 CR4=00000000001426f0 [ 3236.308927][T18381] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3236.316305][T18381] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3236.323141][T18381] *** Control State *** [ 3236.327360][T18381] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3236.334725][T18381] EntryControls=0000d1ff ExitControls=002fefff [ 3236.341061][T18381] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3236.348752][T18381] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3236.356111][T18381] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3236.363476][T18381] reason=80000021 qualification=0000000000000000 [ 3236.371169][T18381] IDTVectoring: info=00000000 errcode=00000000 [ 3236.377424][T18381] TSC Offset = 0xfffff938a5cea1b6 22:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xaf', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x3f00000000000000]}]}}) 22:36:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x4}, {0xe}}) [ 3236.382462][T18381] EPT pointer = 0x0000000056a8c01e 22:36:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x8}, {0xe}}) 22:36:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x8001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x5, 0x4) ioctl$TCSBRKP(r3, 0x5425, 0xffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xbf}, {0xe}}) [ 3236.762391][T18425] *** Guest State *** [ 3236.778608][T18425] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3236.800815][T18425] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}]}}) 22:36:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:45 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb0', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xbf00}, {0xe}}) [ 3236.823369][T18425] CR3 = 0x0000000000000000 [ 3236.862365][T18425] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3236.872444][T18425] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3236.894375][T18425] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 22:36:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3236.908450][T18425] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3236.915809][T18425] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3236.956805][T18425] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3236.978725][T18425] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.021321][T18425] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.030924][T18425] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.040365][T18425] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.053967][T18425] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.063682][T18425] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3237.073000][T18425] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.083689][T18425] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3237.093303][T18425] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3237.102620][T18425] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3237.114092][T18425] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3237.124179][T18425] Interruptibility = 00000000 ActivityState = 00000000 [ 3237.131671][T18425] *** Host State *** [ 3237.135814][T18425] RIP = 0xffffffff811b4980 RSP = 0xffff8880462278e0 [ 3237.143124][T18425] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3237.151143][T18425] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3237.160499][T18425] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3237.167681][T18425] CR0=0000000080050033 CR3=0000000058b83000 CR4=00000000001426e0 [ 3237.175590][T18425] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3237.183188][T18425] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3237.190235][T18425] *** Control State *** [ 3237.194523][T18425] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3237.202040][T18425] EntryControls=0000d1ff ExitControls=002fefff [ 3237.208393][T18425] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 22:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x4000000000000000]}]}}) 22:36:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x1000000}, {0xe}}) 22:36:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:45 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb1', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3237.216054][T18425] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3237.223674][T18425] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3237.231111][T18425] reason=80000021 qualification=0000000000000000 [ 3237.238268][T18425] IDTVectoring: info=00000000 errcode=00000000 [ 3237.244540][T18425] TSC Offset = 0xfffff9381db477e0 [ 3237.249637][T18425] EPT pointer = 0x0000000093db401e 22:36:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x200000002, 0x0, 0x20000003, 0x2000, &(0x7f0000043000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x20) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getresgid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r7 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x9d26, r6, r5, r6, r4, 0x5, 0x8001}, 0xa689, 0x8, 0x7fffffff, 0x0, 0x7, 0x1, r7, r8}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x4000000}, {0xe}}) 22:36:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}]}}) 22:36:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:46 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xb2', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x8000000}, {0xe}}) 22:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3237.874847][T18484] *** Guest State *** [ 3237.895744][T18484] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3237.920752][T18484] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3237.932013][T18484] CR3 = 0x0000000000000000 [ 3237.937058][T18484] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3237.958161][T18484] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3237.975422][T18484] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3237.982483][T18484] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3237.993623][T18484] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3238.001245][T18484] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.010137][T18484] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.018948][T18484] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.027686][T18484] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.027706][T18484] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.027724][T18484] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.027737][T18484] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3238.027755][T18484] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.027768][T18484] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3238.027787][T18484] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.027798][T18484] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3238.027810][T18484] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3238.027825][T18484] Interruptibility = 00000000 ActivityState = 00000000 [ 3238.080100][T18484] *** Host State *** [ 3238.080117][T18484] RIP = 0xffffffff811b4980 RSP = 0xffff8880642a78e0 [ 3238.080146][T18484] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3238.128998][T18484] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3238.137600][T18484] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3238.144214][T18484] CR0=0000000080050033 CR3=00000000501f8000 CR4=00000000001426e0 [ 3238.152117][T18484] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3238.204223][T18484] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3238.211854][T18484] *** Control State *** [ 3238.216117][T18484] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3238.223537][T18484] EntryControls=0000d1ff ExitControls=002fefff [ 3238.223552][T18484] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3238.223561][T18484] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3238.223571][T18484] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:36:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}]}}) 22:36:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xbf000000}, {0xe}}) 22:36:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:46 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb2', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3238.223580][T18484] reason=80000021 qualification=0000000000000000 [ 3238.223587][T18484] IDTVectoring: info=00000000 errcode=00000000 [ 3238.223594][T18484] TSC Offset = 0xfffff937858ac885 [ 3238.223602][T18484] EPT pointer = 0x00000000a672601e 22:36:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xfdfdffff}, {0xe}}) 22:36:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x19, 0x4, @thr={&(0x7f00000000c0)="6636c34c58cddfccf09db15ed725bd19fa2921b885e418738be4fa0e18dbc0f9c684458b15fbfda77045a412cf1d972bba4816c60e4507b9658d31c7383d52ea586559b326b0c5c07bfa56a84417ed78424319bcd28fbcdf227f504fba0a98390d5d869b470ded8e3d3ac32bc60b330ad65394dca2fc8137c344e55afcd69c0f74e03a125695be3c26ae8e02328f89e23fc9cea41b02a8f225d1837c33b6549bcb7b964ac0a76d05b3ba48ff54b8c794abe7976fa3134ec86bc016c12bc0861d905708185fa1d543b90797288fbf08d7c30e84ffaef55ac73654ee1a90bf9a27e2827b1f275673ec126ea18fdbc28680bbff71a155", &(0x7f00000001c0)="c07ad402f416840eade220bd47fcb0d8270dbc40e0a4074b2f61199bc61f946382b31ca7d6fc9ae75d8ad8b2cb72bb5734bcf2e518f8d49f3643e8097eae2041cf0fc5f06eefa32ebaad73db0e36f29169da6cce4d7ab9df140e3fc1a841baeba70adb14e529b098ab76b812332ee64b421a8460871a839e1a00ae9936a3b2629b7e3c94105f73e176676a1e573c5b2463d811b831b8c3b80951a9c63ebec2e9fd457fd40540b759249f90c0cad7fc946d13c5c916d5a548c2ea5bc066"}}, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3238.594945][T18519] *** Guest State *** [ 3238.600183][T18519] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3238.609869][T18519] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3238.619687][T18519] CR3 = 0x0000000000000000 [ 3238.624114][T18519] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3238.631398][T18519] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3238.638659][T18519] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3238.645336][T18519] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3238.652134][T18519] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3238.659817][T18519] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.668639][T18519] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.668657][T18519] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.668682][T18519] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.695157][T18519] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.704055][T18519] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.713784][T18519] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3238.722626][T18519] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3238.731382][T18519] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3238.740178][T18519] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000000000000]}]}}) 22:36:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xfffffdfd}, {0xe}}) 22:36:47 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb3', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3238.767038][T18519] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3238.774206][T18519] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3238.782487][T18519] Interruptibility = 00000000 ActivityState = 00000000 [ 3238.790368][T18519] *** Host State *** [ 3238.815719][T18519] RIP = 0xffffffff811b4980 RSP = 0xffff88806042f8e0 22:36:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x100000000000000}, {0xe}}) [ 3238.840205][T18519] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3238.903176][T18519] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3238.937937][T18519] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3238.945392][T18519] CR0=0000000080050033 CR3=00000000a8868000 CR4=00000000001426e0 [ 3238.953979][T18519] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3238.972143][T18519] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3238.996848][T18519] *** Control State *** [ 3239.003179][T18519] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3239.016738][T18519] EntryControls=0000d1ff ExitControls=002fefff [ 3239.024368][T18519] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3239.032625][T18519] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3239.040891][T18519] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3239.048449][T18519] reason=80000021 qualification=0000000000000000 [ 3239.056141][T18519] IDTVectoring: info=00000000 errcode=00000000 [ 3239.070608][T18519] TSC Offset = 0xfffff937220ec6ee [ 3239.075718][T18519] EPT pointer = 0x000000005fa2701e [ 3239.128795][T18539] *** Guest State *** [ 3239.132990][T18539] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3239.143988][T18539] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3239.153924][T18539] CR3 = 0x0000000000000000 [ 3239.164059][T18539] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}]}}) 22:36:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x400000000000000}, {0xe}}) 22:36:47 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb4', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3239.184439][T18539] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3239.193849][T18539] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3239.205094][T18539] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3239.245302][T18539] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x800000000000000}, {0xe}}) [ 3239.293406][T18539] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.327812][T18539] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.342891][T18539] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.361467][T18539] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.384108][T18539] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.397930][T18539] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.422761][T18539] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3239.440979][T18539] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.452375][T18539] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3239.461765][T18539] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.472535][T18539] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3239.480300][T18539] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3239.489090][T18539] Interruptibility = 00000000 ActivityState = 00000000 [ 3239.496353][T18539] *** Host State *** [ 3239.506032][T18539] RIP = 0xffffffff811b4980 RSP = 0xffff8880373f78e0 [ 3239.514676][T18539] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3239.522452][T18539] FSBase=00007f696e2bf700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 3239.531579][T18539] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3239.538951][T18539] CR0=0000000080050033 CR3=00000000a8868000 CR4=00000000001426e0 [ 3239.546975][T18539] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3239.554526][T18539] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3239.561448][T18539] *** Control State *** [ 3239.565648][T18539] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3239.573120][T18539] EntryControls=0000d1ff ExitControls=002fefff [ 3239.579350][T18539] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3239.587059][T18539] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 22:36:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = dup3(r1, r1, 0x80000) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x6, 0xf9}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000000c0)=0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3239.594445][T18539] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3239.601826][T18539] reason=80000021 qualification=0000000000000000 [ 3239.608924][T18539] IDTVectoring: info=00000000 errcode=00000000 [ 3239.615075][T18539] TSC Offset = 0xfffff936d795e7bb [ 3239.620180][T18539] EPT pointer = 0x0000000099eb701e 22:36:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}]}}) 22:36:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x8000000000000000}, {0xe}}) 22:36:48 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb5', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3239.732710][T18566] *** Guest State *** [ 3239.753683][T18566] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3239.785335][T18566] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xbf00000000000000}, {0xe}}) [ 3239.802178][T18566] CR3 = 0x0000000000000000 [ 3239.808268][T18566] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3239.815834][T18566] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3239.832460][T18566] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3239.846364][T18566] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3239.867033][T18566] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3239.874466][T18566] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.932356][T18566] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3239.988023][T18566] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3240.002973][T18566] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3240.015441][T18566] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3240.033508][T18566] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3240.043102][T18566] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3240.063044][T18566] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3240.073216][T18566] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3240.088910][T18566] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3240.104462][T18566] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3240.113898][T18566] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3240.130001][T18566] Interruptibility = 00000000 ActivityState = 00000000 22:36:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x3f00]}]}}) 22:36:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xfdfdffff00000000}, {0xe}}) 22:36:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffff00000000]}]}}) 22:36:48 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb6', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3240.140426][T18566] *** Host State *** [ 3240.144492][T18566] RIP = 0xffffffff811b4980 RSP = 0xffff8880373f78e0 [ 3240.182386][T18566] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3240.200094][T18566] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 22:36:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xbf}}) [ 3240.263638][T18566] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3240.312458][T18566] CR0=0000000080050033 CR3=0000000095380000 CR4=00000000001426e0 [ 3240.333702][T18566] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3240.363166][T18566] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3240.376825][T18566] *** Control State *** [ 3240.384703][T18566] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3240.401013][T18566] EntryControls=0000d1ff ExitControls=002fefff [ 3240.412180][T18566] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3240.424206][T18566] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3240.432120][T18566] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3240.439541][T18566] reason=80000021 qualification=0000000000000000 [ 3240.446849][T18566] IDTVectoring: info=00000000 errcode=00000000 [ 3240.453008][T18566] TSC Offset = 0xfffff93685d85450 [ 3240.458148][T18566] EPT pointer = 0x000000005e4ac01e 22:36:48 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x101001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/63, 0x3f}], 0x2}, 0x2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'nr0\x00', r1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000100)={0x20, 0x1, [0x5, 0xffffffff, 0xffff, 0x100, 0x1000], 0x80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:36:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x4}}) 22:36:48 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb7', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x8}}) 22:36:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x4000]}]}}) 22:36:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) rt_sigpending(&(0x7f0000000140), 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xbf}}) 22:36:49 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb8', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}]}}) 22:36:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xbf00}}) [ 3241.193528][T18635] *** Guest State *** [ 3241.207387][T18635] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3241.265962][T18635] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3241.307026][T18635] CR3 = 0x0000000000000000 22:36:49 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xb9', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x1000000}}) [ 3241.331457][T18635] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3241.349047][T18635] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3241.377540][T18635] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3241.412345][T18635] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3241.442408][T18635] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3241.466370][T18635] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.486112][T18635] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.495906][T18635] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.511684][T18635] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.539544][T18635] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.552069][T18635] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.561376][T18635] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3241.570783][T18635] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.581255][T18635] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3241.590580][T18635] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.599929][T18635] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3241.607742][T18635] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3241.622280][T18635] Interruptibility = 00000000 ActivityState = 00000000 [ 3241.629724][T18635] *** Host State *** [ 3241.634072][T18635] RIP = 0xffffffff811b4980 RSP = 0xffff888064ac78e0 [ 3241.645406][T18635] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3241.652708][T18635] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3241.667821][T18635] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3241.674438][T18635] CR0=0000000080050033 CR3=0000000057532000 CR4=00000000001426e0 [ 3241.674455][T18635] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3241.674468][T18635] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3241.674474][T18635] *** Control State *** [ 3241.674484][T18635] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3241.674493][T18635] EntryControls=0000d1ff ExitControls=002fefff [ 3241.674507][T18635] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3241.674517][T18635] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3241.674527][T18635] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3241.674536][T18635] reason=80000021 qualification=0000000000000000 [ 3241.674544][T18635] IDTVectoring: info=00000000 errcode=00000000 [ 3241.674551][T18635] TSC Offset = 0xfffff935be3e2d7a [ 3241.674560][T18635] EPT pointer = 0x000000005e3e101e [ 3241.805688][T18672] *** Guest State *** [ 3241.816936][T18672] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3241.826516][T18672] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3241.843394][T18672] CR3 = 0x0000000000000000 [ 3241.849767][T18672] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3241.864039][T18672] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3241.872532][T18672] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3241.879526][T18672] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3241.886367][T18672] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3241.894802][T18672] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.904257][T18672] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.913224][T18672] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.922149][T18672] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.931410][T18672] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.949617][T18672] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.963244][T18672] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3241.974879][T18672] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3241.984066][T18672] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3241.993561][T18672] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.002726][T18672] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3242.010217][T18672] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3242.028950][T18672] Interruptibility = 00000000 ActivityState = 00000000 [ 3242.035903][T18672] *** Host State *** [ 3242.040206][T18672] RIP = 0xffffffff811b4980 RSP = 0xffff8880556cf8e0 [ 3242.047274][T18672] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3242.054395][T18672] FSBase=00007f696e2bf700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3242.063737][T18672] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3242.070735][T18672] CR0=0000000080050033 CR3=0000000057532000 CR4=00000000001426f0 [ 3242.084723][T18672] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3242.092486][T18672] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3242.101495][T18672] *** Control State *** 22:36:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff]}]}}) [ 3242.105667][T18672] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3242.113417][T18672] EntryControls=0000d1ff ExitControls=002fefff [ 3242.120243][T18672] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3242.135901][T18672] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3242.143739][T18672] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3242.160517][T18672] reason=80000021 qualification=0000000000000000 [ 3242.170307][T18672] IDTVectoring: info=00000000 errcode=00000000 [ 3242.176490][T18672] TSC Offset = 0xfffff9356996fa50 [ 3242.176501][T18672] EPT pointer = 0x000000009945701e 22:36:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc065153f1755a76b, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:36:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x4000000}}) 22:36:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:50 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xba', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00]}]}}) 22:36:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x8000000}}) 22:36:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3242.363365][T18695] *** Guest State *** 22:36:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 3242.389537][T18695] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:50 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xbb', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xbf000000}}) [ 3242.452869][T18695] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3242.470295][T18695] CR3 = 0x0000000000000000 [ 3242.474922][T18695] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3242.486047][T18695] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3242.514214][T18695] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3242.542480][T18695] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3242.552814][T18695] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3242.584287][T18695] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.616072][T18695] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.637359][T18695] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.665372][T18695] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.685281][T18695] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.695425][T18695] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.714443][T18695] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3242.726155][T18695] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.751157][T18695] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3242.764398][T18695] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3242.779017][T18695] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3242.786217][T18695] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3242.796177][T18695] Interruptibility = 00000000 ActivityState = 00000000 [ 3242.806133][T18695] *** Host State *** [ 3242.812369][T18695] RIP = 0xffffffff811b4980 RSP = 0xffff88809fd278e0 [ 3242.823573][T18695] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3242.832583][T18695] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3242.856877][T18695] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3242.863911][T18695] CR0=0000000080050033 CR3=0000000099196000 CR4=00000000001426e0 [ 3242.872762][T18695] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3242.880691][T18695] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3242.887822][T18695] *** Control State *** [ 3242.892068][T18695] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3242.899784][T18695] EntryControls=0000d1ff ExitControls=002fefff [ 3242.905949][T18695] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3242.913644][T18695] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3242.921068][T18695] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3242.928435][T18695] reason=80000021 qualification=0000000000000000 [ 3242.935453][T18695] IDTVectoring: info=00000000 errcode=00000000 [ 3242.941645][T18695] TSC Offset = 0xfffff9351ffdc644 [ 3242.946728][T18695] EPT pointer = 0x000000005e3e101e 22:36:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1000000]}]}}) 22:36:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xfdfdffff}}) 22:36:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:51 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xbc', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3243.165599][T18733] *** Guest State *** [ 3243.182149][T18733] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 22:36:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}]}}) 22:36:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xfffffdfd}}) 22:36:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3243.224546][T18733] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3243.270890][T18733] CR3 = 0x0000000000000000 [ 3243.275743][T18733] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3243.293584][T18733] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:51 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xbd', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x100000000000000}}) [ 3243.325872][T18733] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3243.355666][T18733] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3243.387072][T18733] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3243.405790][T18733] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 3243.433548][T18733] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.447092][T18733] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.481522][T18733] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.505159][T18733] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.516845][T18733] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.529860][T18733] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3243.539355][T18733] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.553436][T18733] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3243.581981][T18733] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3243.591312][T18733] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3243.598999][T18733] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3243.608209][T18733] Interruptibility = 00000000 ActivityState = 00000000 [ 3243.615372][T18733] *** Host State *** [ 3243.619941][T18733] RIP = 0xffffffff811b4980 RSP = 0xffff88809fd278e0 [ 3243.627397][T18733] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3243.634738][T18733] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3243.643811][T18733] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3243.650949][T18733] CR0=0000000080050033 CR3=0000000055176000 CR4=00000000001426f0 [ 3243.660578][T18733] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3243.673818][T18733] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3243.681335][T18733] *** Control State *** [ 3243.685718][T18733] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3243.693480][T18733] EntryControls=0000d1ff ExitControls=002fefff [ 3243.699914][T18733] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3243.707826][T18733] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3243.715333][T18733] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3243.722801][T18733] reason=80000021 qualification=0000000000000000 [ 3243.729955][T18733] IDTVectoring: info=00000000 errcode=00000000 [ 3243.736142][T18733] TSC Offset = 0xfffff934ae18961f [ 3243.741394][T18733] EPT pointer = 0x0000000091fad01e 22:36:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x2000000]}]}}) 22:36:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x400000000000000}}) 22:36:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:52 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xbe', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000100)={0x4, 0x100, [{0x7f, 0x0, 0x100}, {0x200, 0x0, 0x80000001}, {0x81, 0x0, 0x3}, {0x7fffffff, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x16842, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) [ 3244.095126][T18778] *** Guest State *** [ 3244.106357][T18778] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3244.117225][T18778] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 22:36:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x80ffff]}]}}) 22:36:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x800000000000000}}) 22:36:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) [ 3244.172136][T18778] CR3 = 0x0000000000000000 [ 3244.183654][T18778] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3244.200897][T18778] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3244.227335][T18778] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3244.256950][T18778] RFLAGS=0x00000002 DR7 = 0x0000000000000400 22:36:52 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xbf', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0x8000000000000000}}) 22:36:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3244.273143][T18778] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3244.288825][T18778] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.344390][T18778] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.366859][T18778] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xbf00000000000000}}) [ 3244.406179][T18778] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.434848][T18778] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.453666][T18778] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.487395][T18778] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3244.506816][T18778] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.527912][T18778] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3244.541121][T18778] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3244.552338][T18778] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3244.570551][T18778] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3244.579214][T18778] Interruptibility = 00000000 ActivityState = 00000000 [ 3244.589519][T18778] *** Host State *** [ 3244.593435][T18778] RIP = 0xffffffff811b4980 RSP = 0xffff88809fd278e0 [ 3244.600976][T18778] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3244.608639][T18778] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3244.617493][T18778] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3244.624103][T18778] CR0=0000000080050033 CR3=0000000089189000 CR4=00000000001426e0 [ 3244.632438][T18778] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3244.639900][T18778] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3244.646819][T18778] *** Control State *** [ 3244.651074][T18778] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3244.658539][T18778] EntryControls=0000d1ff ExitControls=002fefff [ 3244.664972][T18778] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3244.672733][T18778] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3244.680225][T18778] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3244.687718][T18778] reason=80000021 qualification=0000000000000000 [ 3244.694750][T18778] IDTVectoring: info=00000000 errcode=00000000 [ 3244.701005][T18778] TSC Offset = 0xfffff934326f0983 [ 3244.706046][T18778] EPT pointer = 0x000000009b4a701e 22:36:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}]}}) 22:36:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe, 0xfdfdffff00000000}}) 22:36:53 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc0', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)={0xffffffffffffff80, 0xf, 0x4, 0x0, {}, {0x2, 0x1, 0x9, 0x2b4, 0x7387e1f8, 0x401, "71b6751a"}, 0x4, 0x2, @userptr=0x10001, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 3245.018118][T18824] *** Guest State *** [ 3245.031727][T18824] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3245.076827][T18824] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3245.101506][T18824] CR3 = 0x0000000000000000 [ 3245.106073][T18824] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3245.113670][T18824] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}]}}) 22:36:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x4}) 22:36:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:53 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc1', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3245.121530][T18824] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3245.136841][T18824] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3245.151151][T18824] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 22:36:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x8}) [ 3245.241096][T18824] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.258611][T18824] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.295392][T18824] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.333391][T18824] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xbf}) [ 3245.361244][T18824] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.412614][T18824] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.455663][T18824] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3245.468873][T18824] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.478670][T18824] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3245.488229][T18824] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3245.497561][T18824] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3245.504963][T18824] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3245.516199][T18824] Interruptibility = 00000000 ActivityState = 00000000 [ 3245.525018][T18824] *** Host State *** [ 3245.530623][T18824] RIP = 0xffffffff811b4980 RSP = 0xffff888098bcf8e0 [ 3245.546311][T18824] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3245.553984][T18824] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3245.562820][T18824] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3245.569720][T18824] CR0=0000000080050033 CR3=000000008dfcb000 CR4=00000000001426f0 [ 3245.577712][T18824] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3245.585269][T18824] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3245.592219][T18824] *** Control State *** [ 3245.596415][T18824] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3245.603887][T18824] EntryControls=0000d1ff ExitControls=002fefff [ 3245.610173][T18824] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3245.618066][T18824] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3245.625449][T18824] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3245.632833][T18824] reason=80000021 qualification=0000000000000000 [ 3245.639910][T18824] IDTVectoring: info=00000000 errcode=00000000 [ 3245.646057][T18824] TSC Offset = 0xfffff933b4957c0d [ 3245.652076][T18824] EPT pointer = 0x00000000875a001e 22:36:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x40000000]}]}}) 22:36:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:54 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc2', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xbf00}) 22:36:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3245.954283][T18873] *** Guest State *** [ 3245.961756][T18873] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3245.988572][T18873] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3246.003590][T18873] CR3 = 0x0000000000000000 [ 3246.008681][T18873] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3246.016138][T18873] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3246.024177][T18873] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3246.031428][T18873] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3246.049287][T18873] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3246.057021][T18873] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.066982][T18873] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.075913][T18873] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.086275][T18873] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.095970][T18873] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}]}}) 22:36:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x1000000}) 22:36:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) [ 3246.112126][T18873] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.153068][T18873] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3246.180528][T18873] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x4000000}) 22:36:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) [ 3246.208682][T18873] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3246.234095][T18873] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 22:36:54 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc3', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3246.253664][T18873] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3246.297027][T18873] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3246.328507][T18873] Interruptibility = 00000000 ActivityState = 00000000 [ 3246.340586][T18873] *** Host State *** 22:36:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x8000000}) [ 3246.344805][T18873] RIP = 0xffffffff811b4980 RSP = 0xffff888045f078e0 [ 3246.352123][T18873] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3246.359727][T18873] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3246.378860][T18873] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3246.400525][T18873] CR0=0000000080050033 CR3=000000008c274000 CR4=00000000001426f0 [ 3246.421953][T18873] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3246.432239][T18873] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3246.445233][T18873] *** Control State *** [ 3246.449783][T18873] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3246.457421][T18873] EntryControls=0000d1ff ExitControls=002fefff [ 3246.463788][T18873] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3246.483197][T18873] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3246.492090][T18873] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3246.504945][T18873] reason=80000021 qualification=0000000000000000 [ 3246.513371][T18873] IDTVectoring: info=00000000 errcode=00000000 [ 3246.524139][T18873] TSC Offset = 0xfffff93336f1879f [ 3246.530063][T18873] EPT pointer = 0x00000000913cc01e 22:36:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}]}}) 22:36:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xbf000000}) 22:36:54 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xc3', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3246.795978][T18917] *** Guest State *** [ 3246.820255][T18917] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3246.845057][T18917] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3246.860475][T18917] CR3 = 0x0000000000000000 [ 3246.865208][T18917] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3246.874222][T18917] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3246.882373][T18917] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3246.894133][T18917] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3246.904763][T18917] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3246.919855][T18917] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.934267][T18917] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.944036][T18917] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.956284][T18917] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.965930][T18917] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.976716][T18917] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3246.985820][T18917] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3247.000051][T18917] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.009014][T18917] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3247.018537][T18917] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.027332][T18917] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3247.027354][T18917] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3247.027365][T18917] Interruptibility = 00000000 ActivityState = 00000000 [ 3247.027370][T18917] *** Host State *** [ 3247.027383][T18917] RIP = 0xffffffff811b4980 RSP = 0xffff8880473d78e0 [ 3247.027411][T18917] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3247.042978][T18917] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 3247.076529][T18917] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3247.083382][T18917] CR0=0000000080050033 CR3=0000000049b34000 CR4=00000000001426f0 [ 3247.091605][T18917] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3247.099236][T18917] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3247.099242][T18917] *** Control State *** [ 3247.099252][T18917] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:36:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xfdfdffff}) 22:36:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f000000]}]}}) 22:36:55 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc4', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3247.099261][T18917] EntryControls=0000d1ff ExitControls=002fefff [ 3247.099273][T18917] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3247.099289][T18917] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3247.139233][T18917] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3247.147089][T18917] reason=80000021 qualification=0000000000000000 [ 3247.154311][T18917] IDTVectoring: info=00000000 errcode=00000000 [ 3247.161010][T18917] TSC Offset = 0xfffff932be24f077 [ 3247.190329][T18917] EPT pointer = 0x00000000568e401e 22:36:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xfffffdfd}) 22:36:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2080000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3247.451925][T18951] *** Guest State *** [ 3247.456072][T18951] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3247.480445][T18951] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3247.493254][T18951] CR3 = 0x0000000000000000 [ 3247.498276][T18951] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3247.505598][T18951] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3247.512976][T18951] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3247.521364][T18951] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3247.528428][T18951] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3247.535998][T18951] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.544848][T18951] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.553689][T18951] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.562675][T18951] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.571588][T18951] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.581353][T18951] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.590553][T18951] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3247.599857][T18951] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.613684][T18951] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3247.625913][T18951] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3247.635041][T18951] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3247.642588][T18951] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3247.652367][T18951] Interruptibility = 00000000 ActivityState = 00000000 [ 3247.659685][T18951] *** Host State *** [ 3247.663700][T18951] RIP = 0xffffffff811b4980 RSP = 0xffff888098bcf8e0 [ 3247.670888][T18951] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3247.678538][T18951] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3247.691426][T18951] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 22:36:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xffff8000]}]}}) 22:36:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x100000000000000}) 22:36:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:55 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc5', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3247.698529][T18951] CR0=0000000080050033 CR3=0000000091c1e000 CR4=00000000001426e0 22:36:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x400000000000000}) [ 3247.743633][T18951] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3247.766398][T18951] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3247.833274][T18951] *** Control State *** [ 3247.842849][T18951] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce 22:36:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) [ 3247.874690][T18951] EntryControls=0000d1ff ExitControls=002fefff [ 3247.897125][T18951] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3247.939168][T18951] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3247.970820][T18951] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3247.980953][T18951] reason=80000021 qualification=0000000000000000 [ 3247.993494][T18951] IDTVectoring: info=00000000 errcode=00000000 [ 3248.000436][T18951] TSC Offset = 0xfffff932625b9a9b [ 3248.005605][T18951] EPT pointer = 0x000000009692d01e 22:36:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}]}}) 22:36:56 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc6', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x800000000000000}) 22:36:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3248.271138][T18998] Unknown ioctl 21532 [ 3248.302651][T18998] *** Guest State *** [ 3248.319615][T18998] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3248.335869][T18998] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3248.346888][T18998] CR3 = 0x0000000000000000 [ 3248.351323][T18998] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3248.358604][T18998] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3248.365806][T18998] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3248.372629][T18998] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3248.379671][T18998] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3248.389866][T18998] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.399477][T18998] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.408467][T18998] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.417355][T18998] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.426051][T18998] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.434877][T18998] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.444235][T18998] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3248.453016][T18998] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.461806][T18998] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3248.470599][T18998] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3248.479869][T18998] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3248.487064][T18998] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3248.495240][T18998] Interruptibility = 00000000 ActivityState = 00000000 [ 3248.502295][T18998] *** Host State *** [ 3248.506209][T18998] RIP = 0xffffffff811b4980 RSP = 0xffff8880397df8e0 [ 3248.513056][T18998] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3248.520269][T18998] FSBase=00007f696e2e0700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3248.528863][T18998] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3248.535451][T18998] CR0=0000000080050033 CR3=000000008f94e000 CR4=00000000001426e0 [ 3248.543235][T18998] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3248.550665][T18998] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3248.557511][T18998] *** Control State *** [ 3248.561682][T18998] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3248.570048][T18998] EntryControls=0000d1ff ExitControls=002fefff [ 3248.576335][T18998] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3248.589612][T18998] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3248.597390][T18998] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 22:36:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}]}}) 22:36:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x8000000000000000}) 22:36:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:56 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc7', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3248.626965][T18998] reason=80000021 qualification=0000000000000000 [ 3248.634369][T18998] IDTVectoring: info=00000000 errcode=00000000 [ 3248.640831][T18998] TSC Offset = 0xfffff931f0c11fa0 [ 3248.646029][T18998] EPT pointer = 0x000000009ae0401e 22:36:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xbf00000000000000}) 22:36:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0xfdfdffff00000000}) [ 3249.006316][T19026] Unknown ioctl 21532 22:36:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}]}}) 22:36:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:57 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc8', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x4}) 22:36:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x128, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x4400) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3249.199705][T19039] *** Guest State *** [ 3249.204615][T19039] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3249.215038][T19039] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3249.228458][T19039] CR3 = 0x0000000000000000 [ 3249.235144][T19039] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 3249.246829][T19039] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 3249.266440][T19039] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3249.292857][T19039] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3249.300035][T19039] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3249.307848][T19039] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.316857][T19039] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.325649][T19039] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.335149][T19039] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.344028][T19039] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.344046][T19039] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.361691][T19039] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3249.370585][T19039] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.380749][T19039] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3249.389663][T19039] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.399645][T19039] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3249.408247][T19039] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3249.416414][T19039] Interruptibility = 00000000 ActivityState = 00000000 [ 3249.423513][T19039] *** Host State *** [ 3249.427565][T19039] RIP = 0xffffffff811b4980 RSP = 0xffff88805789f8e0 [ 3249.437936][T19039] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 3249.445048][T19039] FSBase=00007f696e2e0700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 3249.453688][T19039] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 3249.460573][T19039] CR0=0000000080050033 CR3=0000000053abc000 CR4=00000000001426f0 [ 3249.468523][T19039] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 3249.475907][T19039] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3249.482814][T19039] *** Control State *** [ 3249.487016][T19039] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3249.494375][T19039] EntryControls=0000d1ff ExitControls=002fefff [ 3249.500670][T19039] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3249.508886][T19039] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3249.516247][T19039] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3249.523668][T19039] reason=80000021 qualification=0000000000000000 [ 3249.530870][T19039] IDTVectoring: info=00000000 errcode=00000000 [ 3249.537176][T19039] TSC Offset = 0xfffff9317601196f [ 3249.542906][T19039] EPT pointer = 0x0000000088a9f01e 22:36:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff00000000]}]}}) 22:36:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x8}) 22:36:57 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xc9', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3249.598479][T19049] *** Guest State *** [ 3249.602641][T19049] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 3249.619060][T19049] CR4: actual=0xfffffffffffff7fc, shadow=0xfffffffffffffffc, gh_mask=ffffffffffffe871 [ 3249.636779][T19049] CR3 = 0x0000000000000000 [ 3249.650108][T19049] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 22:36:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf}) 22:36:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 3249.696515][T19049] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 22:36:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf00}) [ 3249.749076][T19049] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 3249.775301][T19049] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 3249.807840][T19049] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 3249.815265][T19049] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.815285][T19049] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.815304][T19049] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.815321][T19049] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.815339][T19049] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.815363][T19049] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.863667][T19049] GDTR: limit=0x00000000, base=0x0000000000000000 [ 3249.884300][T19049] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.893646][T19049] IDTR: limit=0x00000000, base=0x0000000000000000 [ 3249.912014][T19049] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 3249.963650][T19049] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 3249.990580][T19049] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 3250.014147][T19049] Interruptibility = 00000000 ActivityState = 00000000 [ 3250.042102][T19049] *** Host State *** [ 3250.046236][T19049] RIP = 0xffffffff811b4980 RSP = 0xffff8880397df8e0 [ 3250.056302][T19049] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 22:36:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}]}}) 22:36:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x1000000}) 22:36:58 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xca', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3250.071301][T19049] FSBase=00007f696e2bf700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 3250.107016][T19049] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 3250.113885][T19049] CR0=0000000080050033 CR3=0000000053abc000 CR4=00000000001426e0 [ 3250.139301][T19049] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 3250.181032][T19049] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 3250.208613][T19049] *** Control State *** [ 3250.217047][T19049] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ce [ 3250.238045][T19049] EntryControls=0000d1ff ExitControls=002fefff [ 3250.244392][T19049] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 3250.256314][T19049] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3250.264189][T19049] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 3250.279073][T19049] reason=80000021 qualification=0000000000000000 [ 3250.286239][T19049] IDTVectoring: info=00000000 errcode=00000000 [ 3250.295946][T19049] TSC Offset = 0xfffff9313d2a647e [ 3250.305093][T19049] EPT pointer = 0x0000000090cf201e 22:36:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:36:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}]}}) 22:36:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x4000000}) 22:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xff) 22:36:58 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xcb', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:36:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x8000000}) 22:36:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf]}) 22:36:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}]}}) 22:36:59 executing program 5: 22:36:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xbf000000}) 22:36:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) 22:36:59 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xcc', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffff8000]}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}]}}) 22:36:59 executing program 5: 22:36:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 22:36:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xfdfdffff}) 22:36:59 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xcd', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 22:36:59 executing program 5: 22:36:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}) 22:37:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8d6e3a3c1d5df9fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x80ffff00000000]}]}}) 22:37:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0xe}, 0x0, 0xfffffdfd}) 22:37:00 executing program 5: 22:37:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0xe}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00000000000000]}) 22:37:00 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01q\xce', 0x501e}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) [ 3251.913312][T19168] ================================================================== [ 3251.921918][T19168] BUG: KASAN: use-after-free in check_and_subscribe_port+0x7bd/0x860 [ 3251.930000][T19168] Write of size 8 at addr ffff88809587bba0 by task syz-executor.2/19168 [ 3251.938322][T19168] [ 3251.940679][T19168] CPU: 0 PID: 19168 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #95 [ 3251.948665][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3251.958805][T19168] Call Trace: [ 3251.958852][T19168] dump_stack+0x172/0x1f0 [ 3251.958872][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3251.958890][T19168] print_address_description.cold+0x7c/0x20d [ 3251.958904][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3251.958920][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3251.958939][T19168] kasan_report.cold+0x1b/0x40 [ 3251.966573][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3251.966595][T19168] __asan_report_store8_noabort+0x17/0x20 [ 3251.966610][T19168] check_and_subscribe_port+0x7bd/0x860 [ 3251.966636][T19168] snd_seq_port_connect+0x388/0x510 [ 3251.966665][T19168] snd_seq_ioctl_subscribe_port+0x1e5/0x310 [ 3252.022838][T19168] snd_seq_ioctl+0x224/0x3e0 [ 3252.027466][T19168] ? snd_seq_open+0x5b0/0x5b0 [ 3252.032171][T19168] ? __fget+0x35a/0x550 [ 3252.036367][T19168] ? snd_seq_open+0x5b0/0x5b0 [ 3252.041059][T19168] do_vfs_ioctl+0xd6e/0x1390 [ 3252.045679][T19168] ? ioctl_preallocate+0x210/0x210 [ 3252.050824][T19168] ? __fget+0x381/0x550 [ 3252.055104][T19168] ? ksys_dup3+0x3e0/0x3e0 [ 3252.059537][T19168] ? nsecs_to_jiffies+0x30/0x30 [ 3252.059562][T19168] ? tomoyo_file_ioctl+0x23/0x30 [ 3252.059585][T19168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3252.069469][T19168] ? security_file_ioctl+0x93/0xc0 [ 3252.069489][T19168] ksys_ioctl+0xab/0xd0 [ 3252.069509][T19168] __x64_sys_ioctl+0x73/0xb0 [ 3252.069528][T19168] do_syscall_64+0x103/0x610 [ 3252.069550][T19168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3252.080994][T19168] RIP: 0033:0x458da9 [ 3252.081010][T19168] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3252.081026][T19168] RSP: 002b:00007f6a5c605c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3252.089751][T19168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 3252.089760][T19168] RDX: 0000000020000000 RSI: 0000000040505330 RDI: 0000000000000003 [ 3252.089769][T19168] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3252.089779][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a5c6066d4 [ 3252.089787][T19168] R13: 00000000004cc598 R14: 00000000004d5ee8 R15: 00000000ffffffff [ 3252.089811][T19168] [ 3252.089820][T19168] Allocated by task 19168: [ 3252.089840][T19168] save_stack+0x45/0xd0 [ 3252.089867][T19168] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 3252.095294][T19164] kobject: 'queues' (00000000012285c7): kobject_uevent_env [ 3252.100326][T19168] kasan_kmalloc+0x9/0x10 [ 3252.100348][T19168] kmem_cache_alloc_trace+0x151/0x760 [ 3252.100365][T19168] snd_seq_port_connect+0x60/0x510 [ 3252.100380][T19168] snd_seq_ioctl_subscribe_port+0x1e5/0x310 [ 3252.100391][T19168] snd_seq_ioctl+0x224/0x3e0 [ 3252.100405][T19168] do_vfs_ioctl+0xd6e/0x1390 [ 3252.100424][T19168] ksys_ioctl+0xab/0xd0 [ 3252.106475][T19164] kobject: 'queues' (00000000012285c7): kobject_uevent_env: filter function caused the event to drop! [ 3252.124037][T19168] __x64_sys_ioctl+0x73/0xb0 [ 3252.124053][T19168] do_syscall_64+0x103/0x610 [ 3252.124066][T19168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3252.124071][T19168] [ 3252.124078][T19168] Freed by task 19167: [ 3252.124103][T19168] save_stack+0x45/0xd0 [ 3252.124117][T19168] __kasan_slab_free+0x102/0x150 [ 3252.124129][T19168] kasan_slab_free+0xe/0x10 [ 3252.124140][T19168] kfree+0xcf/0x230 [ 3252.124163][T19168] snd_seq_port_disconnect+0x209/0x280 [ 3252.134012][T19164] kobject: 'rx-0' (000000000dbb3841): kobject_add_internal: parent: 'queues', set: 'queues' [ 3252.140646][T19168] snd_seq_ioctl_unsubscribe_port+0x1e5/0x310 [ 3252.140660][T19168] snd_seq_ioctl+0x224/0x3e0 [ 3252.140675][T19168] do_vfs_ioctl+0xd6e/0x1390 [ 3252.140687][T19168] ksys_ioctl+0xab/0xd0 [ 3252.140699][T19168] __x64_sys_ioctl+0x73/0xb0 [ 3252.140714][T19168] do_syscall_64+0x103/0x610 [ 3252.140736][T19168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3252.149478][T19164] kobject: 'rx-0' (000000000dbb3841): kobject_uevent_env [ 3252.156683][T19168] [ 3252.156698][T19168] The buggy address belongs to the object at ffff88809587bb40 [ 3252.156698][T19168] which belongs to the cache kmalloc-128 of size 128 [ 3252.156710][T19168] The buggy address is located 96 bytes inside of [ 3252.156710][T19168] 128-byte region [ffff88809587bb40, ffff88809587bbc0) [ 3252.156715][T19168] The buggy address belongs to the page: [ 3252.156730][T19168] page:ffffea0002561ec0 count:1 mapcount:0 mapping:ffff8880aa400640 index:0xffff88809587bd80 [ 3252.156743][T19168] flags: 0x1fffc0000000200(slab) [ 3252.156798][T19168] raw: 01fffc0000000200 ffffea0002949788 ffffea0002906888 ffff8880aa400640 [ 3252.165711][T19164] kobject: 'rx-0' (000000000dbb3841): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 3252.172855][T19168] raw: ffff88809587bd80 ffff88809587b000 000000010000000f 0000000000000000 [ 3252.172862][T19168] page dumped because: kasan: bad access detected [ 3252.172866][T19168] [ 3252.172870][T19168] Memory state around the buggy address: [ 3252.172883][T19168] ffff88809587ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3252.172893][T19168] ffff88809587bb00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3252.172904][T19168] >ffff88809587bb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3252.172910][T19168] ^ [ 3252.172921][T19168] ffff88809587bc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3252.172932][T19168] ffff88809587bc80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 3252.172938][T19168] ================================================================== [ 3252.172943][T19168] Disabling lock debugging due to kernel taint [ 3252.172951][T19168] Kernel panic - not syncing: panic_on_warn set ... [ 3252.172971][T19168] CPU: 0 PID: 19168 Comm: syz-executor.2 Tainted: G B 5.1.0-rc7+ #95 [ 3252.178150][T19164] kobject: 'tx-0' (00000000c65b598a): kobject_add_internal: parent: 'queues', set: 'queues' [ 3252.179685][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3252.179690][T19168] Call Trace: [ 3252.179713][T19168] dump_stack+0x172/0x1f0 [ 3252.179736][T19168] panic+0x2cb/0x65c [ 3252.184058][T19164] kobject: 'tx-0' (00000000c65b598a): kobject_uevent_env [ 3252.189489][T19168] ? __warn_printk+0xf3/0xf3 [ 3252.189506][T19168] ? lock_downgrade+0x880/0x880 [ 3252.189526][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3252.189546][T19168] ? trace_hardirqs_off+0x62/0x220 [ 3252.197316][T19164] kobject: 'tx-0' (00000000c65b598a): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 3252.201077][T19168] ? trace_hardirqs_off+0x59/0x220 [ 3252.201107][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3252.201127][T19168] end_report+0x47/0x4f [ 3252.207723][T19164] kobject: 'batman_adv' (0000000051f6380c): kobject_add_internal: parent: 'nr0', set: '' [ 3252.211591][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3252.211605][T19168] kasan_report.cold+0xe/0x40 [ 3252.211625][T19168] ? check_and_subscribe_port+0x7bd/0x860 [ 3252.226277][T19173] kobject: 'kvm' (00000000c37d6337): kobject_uevent_env [ 3252.226686][T19168] __asan_report_store8_noabort+0x17/0x20 [ 3252.226704][T19168] check_and_subscribe_port+0x7bd/0x860 [ 3252.226724][T19168] snd_seq_port_connect+0x388/0x510 [ 3252.226746][T19168] snd_seq_ioctl_subscribe_port+0x1e5/0x310 [ 3252.231063][T19173] kobject: 'kvm' (00000000c37d6337): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 3252.241814][T19168] snd_seq_ioctl+0x224/0x3e0 [ 3252.241829][T19168] ? snd_seq_open+0x5b0/0x5b0 [ 3252.241859][T19168] ? __fget+0x35a/0x550 [ 3252.673427][T19168] ? snd_seq_open+0x5b0/0x5b0 [ 3252.678100][T19168] do_vfs_ioctl+0xd6e/0x1390 [ 3252.682698][T19168] ? ioctl_preallocate+0x210/0x210 [ 3252.687802][T19168] ? __fget+0x381/0x550 [ 3252.691943][T19168] ? ksys_dup3+0x3e0/0x3e0 [ 3252.696348][T19168] ? nsecs_to_jiffies+0x30/0x30 [ 3252.701184][T19168] ? tomoyo_file_ioctl+0x23/0x30 [ 3252.706114][T19168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3252.712352][T19168] ? security_file_ioctl+0x93/0xc0 [ 3252.717466][T19168] ksys_ioctl+0xab/0xd0 [ 3252.721606][T19168] __x64_sys_ioctl+0x73/0xb0 [ 3252.726181][T19168] do_syscall_64+0x103/0x610 [ 3252.730757][T19168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3252.736659][T19168] RIP: 0033:0x458da9 [ 3252.740549][T19168] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3252.760152][T19168] RSP: 002b:00007f6a5c605c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3252.768558][T19168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 3252.776526][T19168] RDX: 0000000020000000 RSI: 0000000040505330 RDI: 0000000000000003 [ 3252.784484][T19168] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3252.792445][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a5c6066d4 [ 3252.800413][T19168] R13: 00000000004cc598 R14: 00000000004d5ee8 R15: 00000000ffffffff [ 3252.809915][T19168] Kernel Offset: disabled [ 3252.814271][T19168] Rebooting in 86400 seconds..